AWS SNS Hijackings Fuel Cloud Smishing Campaign
ID: f5bbc0b2-fff4-5728-b6b4-218e96c89c01
STIX ID: report--f5bbc0b2-fff4-5728-b6b4-218e96c89c01
Feed Name: Dark Reading
Date Published: 2024-02-15
Date Updated: 2026-04-21
Author: Kristina Beek, Associate Editor, Dark Reading
SentinelOne researchers observed an active smishing campaign using a custom bulk-messaging tool called SNS Sender together with compromised AWS SNS tenants to send USPS-themed phishing SMS messages that collect PII and payment card data; attackers leverage stolen business cloud credentials and properly configured SNS SMS capabilities to evade vetting and scale messages, creating reputational and operational risk for affected organizations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.