In this article we take a look at a phishing campaign that pretends to be an Amazon AWS suspension notice for unpaid bills that looks good enough to trick many users.

A billing notice from a vendor, especially one like Amazon, that states that your account has been suspended for unpaid bills, may confuse a user enough to click on the email link.

Attackers are capitalizing on this confusion by sending emails that pretend to be from Amazon AWS Support at [email protected] and that use a subject of “Your service has now been suspended”.