Over 2,000 Devices Compromised by Weaponized Social Security Statement Phishing Attacks

A recent phishing campaign has compromised over 2,000 devices by impersonating the U.S. Social Security Administration (SSA). The attackers used a convincing email lure to redirect victims to a fake SSA webpage hosted on Amazon Web Services (AWS).