‼️ A threat actor is allegedly selling SMTP and AWS SES accounts on a popular cybercrime forum, w...

Summary

A threat actor operating under the handle 'ric007' is advertising compromised SMTP and AWS SES accounts for sale on a popular cybercrime forum, with sending capacities ranging from 40,000 to 100,000 emails and prices starting at $150 per account. The listings target major email service providers including SendGrid, Mailgun, and others. This represents a significant abuse vector for spam, phishing, and malware distribution campaigns.

Indicators of Compromise

• malware — Compromised SMTP/AWS SES accounts

Entities