The whole world on one side, wife’s brother on the other: brothers-in-law clashed while garlanding the brother-in-law with notes, a lot of kicking and punching took place; Video – Brothers-in-law Clash While Trying To Garland Brother-in-law With String Of Currency Notes

0

A video of this entire incident is becoming increasingly viral on social media. In the video, people can be seen pelting stones and fighting.

Brothers-in-law clash while trying to garland brother-in-law with string of currency notes

Brother-in-law clashed over the dispute of garlanding brother-in-law with notes – Photo: Amar Ujala

Expansion

There was an uproar before the wedding in Naheda village of Mewat area of ​​Haryana. During the wedding ceremony of groom Arman, there was a dispute between two brothers-in-law. This dispute started over garlanding and blowing of notes.

Dark clouds, protests and resignations dampen start of 61st Venice Biennale | Venice Biennale 2026

0

The 61st Venice Biennale vernissage began on Tuesday under grey clouds and rain showers, as political tension, parties and protest dominated proceedings at one of the art world’s biggest events.

Lubaina Himid, the British entrant, who has spent a career creating work that picks at her country’s colonial past, took over the UK’s pavilion with her large-scale paintings and sound collage that recalls a “perfect British summer’s day”.

Lubaina Himid’s British pavilion exhibition. Photograph: David Levene/The Guardian

Just down the hill from the British pavilion, as rain fell during an inclement Venetian spring day, techno music pumped out of the Russian pavilion, which had large crates of prosecco stacked outside as drinks flowed within.

The celebration was understandable for a country that, despite mounting calls for it to be barred, had managed to pull off an appearance at the most high-profile art event in Europe, after not showing in the past two editions because of outcry over its war in Ukraine.

Before the event, the jury – which selects the winner of the Golden Lion prizes – resigned en masse after stating they would not consider entries from countries whose leaders were subject to international arrest warrants (a move that would bar them from including Russia and Israel).

A DJ performs inside the Russia pavilion. Photograph: Luca Bruno/AP

On Monday, the Italian ministry of culture confirmed that the Russian pavilion would not be open to the public when the event opens fully on 9 May. However, the work, which comprises flower sculptures, will be visible through the windows.

Tetyana Berezhna, a Ukrainian culture minister, told the Guardian that not opening the Russian pavilion to the public was a “meaningful step” but that the country’s “symbolic presence” was still powerful.

“Cultural platforms shape global perception,” she said. “They define what is considered acceptable and whose voices are amplified. In this context, every form of representation matters.”

The Ukraine pavilion’s Origama Deer being installed near the entrance to the giardini. Photograph: David Levene/The Guardian

There were other visible geopolitical vibrations across the event. The Iranian entry pulled out without giving a reason, as a fragile ceasefire between the US and Iran appears to be fracturing.

At midday in the giardini – the Napoleon-era garden where the national pavilions sit and the art world descends every two years – there was a protest by artists who are part of the In Minor Keys show. About 60 artists took part in Solidarity Drone Chorus, humming a song and walking slowly in procession through the garden to protest against Israel’s participation.

More than 200 artists, including Lubaina Himid and Alfredo Jaar, signed an open letter demanding the cancellation of the Israeli pavilion, which opened on Tuesday.

The Israeli pavilion. Photograph: David Levene/The Guardian

This year’s event is without its curator, Koyo Kouoh, the Cameroonian-Swiss arts leader who died in May 2025. The curatorial team she installed – made up of Marie Hélène Pereira, Rasha Salti, Gabe Beckhurst Feijoo, Rory Tsapayi and Siddhartha Mitter – have delivered the event, following her plans.

There are several works that either depict or reference her, including a Derrick Adams mural opposite the entrance to the Arsenale, the other main site of the event.

Koyo Kouoh at a summit in France in 2021. Photograph: Sarah Meyssonnier/AP

When asked about the jury’s decision to resign because of the inclusion of Israel and Russia, Mitter said the team “100% respect the jury” but would not be drawn on whether they thought it was right or wrong.

“It’s not an exhibition that is a commentary on world affairs or geopolitics,” said Salti, who has family based in Beirut. “But I think our principles, where we come from, what the world conflicts have done to our consciousness, is tangible and is manifested in the exhibition.”

“Of course there is an upping of the ante because rightwing politics has gained a lot of currency,” she added. “Perhaps that has made everybody hyper-sensitive.”

Performance takes place in the Russia Pavilion’s 61st International Art Exhibition | David Levene

On the first day of the preview, the Austrian pavilion was the big draw, with large crowds gathering to watch the choreographer Florentina Holzinger in her Seaworld Venice performance. For five-minute spells, once an hour, she hung from inside a bell suspended from a crane above the pavilion and rocked from side to side, using her body to ring it.

Inside, there were several chambers filled with water. One included a jet ski being driven at increasing speed, while outside an artist was submerged in a water tank apparently filled with purified urine. Another tank featured an explosive sewage spill.

Nextdoor to the Austrian pavilion was the other most popular part of the biennale so far: a seagull that had created a nest on the ground. Staff had placed a wooden fence around the bird, which some people mistook for an artwork in its own right.

The seagull nesting outside Poland’s pavilion. Photograph: David Levene/The Guardian


Source link

Access Denied



Access Denied You don’t have permission to access “http://news.sky.com/story/arsenal-reach-champions-league-final-for-the-first-time-in-20-years-13540566” on this server.

Reference #18.f3680117.1778025213.65c7a442

https://errors.edgesuite.net/18.f3680117.1778025213.65c7a442



Source link

Video shows bloodhound tracking Special Forces shooting suspect Craig Berry


NEWYou can now listen to Fox News articles!

FIRST ON FOX: Law enforcement zeroed in on a fresh trail in the hours after Craig Berry allegedly shot his wife, with newly obtained video showing a bloodhound guiding officers through remote woodland as the armed and dangerous fugitive slipped deeper into the rugged terrain.

Video obtained by Fox News Digital from the Tennessee Highway Patrol shows troopers, deputies and investigators with the Stewart County Sheriff’s Office moving through dense woods with a K9 unit as they searched for Berry just hours after the shooting on May 1.

Berry, a Special Forces-trained suspect described by authorities as armed and dangerous, allegedly shot his wife during a domestic incident before fleeing into the surrounding woods, prompting a large-scale manhunt. Officials said the victim survived and was taken to a hospital for treatment.

Investigators obtained a second-degree attempted murder warrant for Berry on May 4 following the shooting.

FOX NEWS TRUE CRIME NEWSLETTER: ARKANSAS HIKING MURDERS, TENNESSEE MANHUNT, JAMES CRAIG TRIAL

Craig Berry and GIF of manhunt

Newly obtained video shows law enforcement using a bloodhound to track fugitive Craig Berry through dense woods in Stewart County, Tennessee, in the hours after he allegedly shot his wife and fled. (Tennessee Highway Patrol | Stewart County Sheriff’s Office)

Four days following Berry’s disappearance, the veteran continues to evade capture as local, state and federal agencies converge in rural Tennessee to locate him.

Authorities say Berry is armed with at least one handgun, may be carrying additional ammunition and should be considered highly dangerous.

“He is very familiar with the area,” Sheriff Frankie Gray said.

FUGITIVE ARRESTED AFTER POSTING VIDEO TAUNTING POLICE ON SOCIAL MEDIA TO ‘LOCATE HIM’

Track camera

The Stewart County Sheriff’s Office says Craig Berry was captured by a trail camera wearing camouflage clothing. (Stewart County Sheriff’s Office)

A person believed to be Berry was captured by a trail camera wearing camouflage clothing, the sheriff’s office said when releasing the photo.

“We’re actively looking, but have NO idea if he is still in the area, so we’re asking you to please check your trail cameras, cause we’re not ruling anything out,” the sheriff’s office wrote. “We are asking if you see anything please report any sightings call 911, and remain on ALERT and lock all your doors.”

GOT A TIP?

Craig Berry in a selfie photo

Craig Berry, the sheriff’s office said, is a retired special forces veteran and has extensive training in survival tactics. Officials added “he is an excellent swimmer and diver, and is in good physical shape.” (Stewart County Sheriff’s Office)

Who is Craig Berry?

The Stewart County Sheriff’s Office described Berry as a retired Special Forces veteran wearing camouflage clothing and said he should be considered “armed and dangerous.”

SURVIVALIST’S GOOGLE SEARCHES REVEAL POSSIBLE ESCAPE PLAN AMID MANHUNT IN DAUGHTERS’ TRIPLE MURDER: REPORT

Deputies added that Berry is an “excellent swimmer and diver” and is believed to be in “good physical shape,” stating he has “extensive training” in survival tactics.

FOLLOW US ON X

Stewart County Schools said in a statement on Facebook that Berry’s wife, whose condition is unknown, is a schoolteacher.

“We are aware of a serious incident involving one of our staff members. We understand this news may be upsetting to students, staff, and families. Please know that this incident did not occur on school grounds, and there is no ongoing threat to our schools,” the school district said. “Our thoughts are with our staff member and her loved ones during this time. We will continue to respect her privacy.”

MANHUNTS ACROSS AMERICA IN 2025: FIVE CASES THAT LEFT CITIES, CAMPUSES AND TOWNS ON EDGE

Craig Berry

Craig Berry is seen in an undated photo released by the Stewart County Sheriff’s Office. (Stewart County Sheriff’s Office)

The man accused of trying to murder his wife is not believed to have a phone or any other form of communication on him after he fled the area on Friday morning.

The search zone has steadily expanded from the initial scene near Old Paris Highway to include Gray’s Landing and corridors along highways 232 and 79.

CLICK HERE FOR MORE US NEWS

Dover, which has a population of about 2,000, is about two hours outside Nashville.

Craig Berry in a selfie photo

Craig Berry was last seen near River Trace Road, and authorities are conducting a “very detailed search” of the area from River Trace Road to Highway 79 to parts of Highway 232 this week, the sheriff’s office said Monday. (Stewart County Sheriff’s Office)

Sheriff Gray said it could be a “lengthy process” in tracking down Berry, urging residents in the area to “lock all your doors.”

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

In a statement to Fox News Digital, the Tennessee Highway Patrol said that it is continuing to assist the Stewart County Sheriff’s Office, the Tennessee Bureau of Investigation and the U.S. Marshals Service with helicopters and troopers, as needed, in the hunt for Berry.

People are asked to contact the Stewart County Sheriff’s Office at 931-232-6863, if they see him or know his whereabouts.



Source link

Access Denied

0

Access Denied You don’t have permission to access “http://hindi.news18.com/cricket/ipl-2026-playoff-equations-csk-raises-stakes-for-three-team-10448625.html” on this server.

Reference #18.bdf9dead.1778026416.31ccba2

https://errors.edgesuite.net/18.bdf9dead.1778026416.31ccba2

Reinstate windfall tax on banks after surge in profits, TUC urges | Banking

0

An increased windfall tax should be imposed on the UK’s largest banks according to trade union leaders, after the big four lenders reported almost £14bn in first-quarter profits, partly fuelled by market turbulence caused by the Iran war.

The Trades Union Congress (TUC) renewed its call for an increase in the current bank surcharge, which was reduced from 8% to 3% of profits above £100m by the Conservative government in 2023, as banks benefit from the high interest rate environment.

The Bank of England held interest rates at 3.75% last week, with markets pricing in up to two increases by the end of this year. The average two-year fixed mortgage rate was 5.77% on Tuesday according to Moneyfacts, compared with 4.83% before the start of the conflict in the Middle East.

Over the past week, the UK’s big four banks – Barclays, HSBC, Lloyds and NatWest – reported combined profits of £13.8bn for the first quarter.

“Getting banks to pay more tax on their profits is plain common sense when they’re raking in billions and the rest of the country is struggling to get by,” said Paul Nowak, general secretary of the TUC.

“With Donald Trump’s war abroad unleashing economic chaos at home, it’s only right that banks’ bumper profits are taxed fairly and used to shield households and firms from the damaging impacts of the war.”

The big four high street banks – Barclays, HSBC, Lloyds and NatWest – made a combined £13.8bn in profits in the first quarter of 2026. Photograph: Andrzej Rostek/Alamy

During a results call last week with the media, William Chalmers, chief financial officer at Lloyds Banking Group, was asked whether banks were “profiteering” from the Iran war.

The FTSE 100 group, whose brands include Lloyds Bank, Halifax and Bank of Scotland, reported a 33% increase in year-on-year profits to £2bn in the first quarter.

“Banks have had many years of very low margins, of low profitability in the context of a low-rate environment,” said Chalmers. “The sector always expected a gradual increase in the profitability of banks when rates rise. That is the way the financial services industry works.”

The TUC estimates that returning the bank surcharge back to the 8% level it was at three years ago, what it calls the “bare minimum”, would raise £9bn over four years. Doubling that to 16% would deliver £24bn over four years.

The big four banks made profits of almost £46bn last year, resulting in bumper annual pay packets for bosses.

“After the Tories cut the bank surcharge tax, banks enjoyed a profits bonanza because of high interest rates,” said Nowak.

“Now they could be set to make even more if interest rates remain high for longer.

“The last economic shock caused by [Vladimir] Putin’s illegal invasion in Ukraine led to a bumper payday for banks at the expense of mortgage payers – we can’t allow the same thing to happen again.”

Last year, the IPPR thinktank argued for a new bank tax to be introduced by chancellor Rachel Reeves in the November budget, a proposal that the industry managed to see off after intense lobbying.



Source link

School bomb threats sweep Kentucky as police investigate robocall campaign


NEWYou can now listen to Fox News articles!

A suspected robocalling campaign may be behind a wave of school bomb threats reported across Kentucky, authorities said.

The Kentucky State Police (KSP) announced Tuesday that it is actively investigating multiple threats targeting schools statewide in coordination with local law enforcement agencies. Preliminary findings suggest the calls may be part of a robocall campaign, according to officials.

“Preliminary findings suggest the threats may be linked to a robocalling campaign. These threats are illegal, disruptive, and unacceptable,” Kentucky State Police said in a statement. “We will thoroughly investigate each incident and hold those responsible fully accountable.”

MOHAMED SABRY SOLIMAN TO PLEAD GUILTY IN DEADLY FIREBOMBING OF PRO-ISRAEL RALLY IN BOULDER, COLORADO

Kentucky State Police cruiser vehicle parked

A Kentucky State Police vehicle is shown in this undated photo. (Silas Walker/Lexington Herald-Leader/Tribune News Service)

So far, officials say none of the threats have been deemed credible.

Police have not specified which schools were targeted.

The news has prompted concern among parents calling for police to share more information.

“Which schools are getting the threats parents have the right to know,” one person wrote on social media.

SUSPECT PLEADS GUILTY TO PLOTTING TAYLOR SWIFT VIENNA CONCERT ATTACK

Hand holding smartphone showing unknown incoming call in living room

Robocalls are automated phone calls that use prerecorded or artificial voice messages. (iStock)

“Do we know what counties have received the threats?” another asked.

“Is there a list of schools with threats?” a third questioned.

Robocalls — automated phone calls that use prerecorded or artificial voice messages — are often a “preferred tool” for scammers, according to the Federal Communications Commission (FCC).

PASSENGER BOMB THREAT TRIGGERS POLICE RESPONSE AND EVACUATION ON FRONTIER FLIGHT UNDER INVESTIGATION

A view of the Kentucky State Police headquarters in Frankfort, Kentucky.

A view of the Kentucky State Police headquarters in Frankfort, Kentucky. (Google Maps)

The incidents follow a series of hoax calls on Friday that led to evacuations and closures at zoos across the country, including the Louisville Zoo, according to WLKY.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Similar fake threats were also reported Monday at high schools in Bucks County, Pennsylvania, and across the Philadelphia suburbs, according to FOX 29.

Kentucky State Police did not immediately respond to Fox News Digital’s request for comment.



Source link

‘It kicks ass’: Rolling Stones launch new album at star-studded New York event | The Rolling Stones

0

On Tuesday afternoon in New York, the Rolling Stones gathered friends, journalists and fellow artists for a preview of their forthcoming 25th album Foreign Tongues.

Before the trio stepped on stage, host Conan O’Brien deadpanned that perhaps, finally, this is the album where the band will “finally make it after decades of obscurity”. The audience, which included Leonardo DiCaprio, director Baz Luhrmann and actor Odessa A’zion, laughed appreciatively.

Seven decades into their career and with over 250m albums sold, the band hardly need to cement their legacy. But recent years have seen the group – now a three-piece in the wake of drummer Charlie Wattsdeath in 2021 – creatively re-energized. Hackney Diamonds, their 2023 album, was praised by the Guardian’s Alexis Petridis as a return to form which “crackles with a sense of purpose”.

On Foreign Tongues, the band once again team up with Hackney Diamonds producer Andrew Watt (Lady Gaga, Justin Bieber), as well as a slew of special guests including Steve Winwood, Paul McCartney, The Cure’s Robert Smith and Chad Smith of Red Hot Chili Peppers.

At the New York event, Mick Jagger said that Foreign Tongues’ 14 songs would span numerous genres. “The thing about this record is – the Stones are a rock band that also has the capacity to do ballads, country music or dance music. So we don’t get stuck in one kind of style.”

“When it’s not working, that’s when we bring in the referee,” says Keith Richards, pointing at producer Watt, who laughed along. “He kicks us up the arse.”

Jagger described new song Ringing Hollow as a “country tune” inspired by his and Richards’ lifelong love of Hank Williams, while Beautiful Delilah draws from the delta blues. The singer also teased Hit Me in the Head, “a real punk rocker” with parts recorded by Watts before his death.

On stage, the three-piece were in good spirits and spry, with Jagger happy to play along when O’Brien joked that the singer’s striped blazer was “from the estate of Willy Wonka”.

“It kicks ass,” said O’Brien of the new album, adding that it is reminiscent of the band’s 1972 classic Exile on Main St, and he has listened to the record “25 times” since receiving it a few days ago. “There’s a vibrancy, an urgency to it.”

That’s partly due to the fact that the album was recorded in about a month, said Jagger: “Only having four weeks gave us an urgency. We’re having fun most of the time in the studio, but it’s a lot of concentration too – you’ve really got to make [a song’s] five minutes count.”

When asked how he keeps his octave-spanning singing voice in tip-top shape, Jagger said wryly: “I was taking a lot of drugs in 1968 … so it’s practice.”

“Riffs, you can’t force them,” said Richards. “They come to you.” Meanwhile, guitarist Ronnie Wood compared the interplay with his fellow guitarist to “an ancient form of weaving”.

The cover art for Foreign Tongues is a painting by New York-based artist Nathaniel Mary Quinn, who described the image as an “amalgamation” of the band. “I call it Mr Ugly,” joked Jagger. “It’s not computer-generated,” he added, to whoops and applause from the audience.

The band also reflected on the loss of longtime drummer Watts with affection and humor. “Charlie handed the baton to Steve [Jordan],” said Wood, of the Stones’ new drummer. Richards was more blunt, saying: “When Charlie hit the bucket, he said: ‘Steve’s your man.’”

More than 60 years into their career, the band said that it was important for them to keep things fresh. “You don’t just want to sit on what you’ve done before,” reflected Richards. “We put it together, we love to do it, and there is always something more in there.”



Source link

Demi Moore corrects fans on how to pronounce her name in viral clip


NEWYou can now listen to Fox News articles!

Demi Moore is once again setting the record straight regarding the correct pronunciation of her name.

In a viral clip shared by a fan on Instagram, the 63-year-old actress was seen signing autographs and posing for photos as she greeted a group of fans on a sidewalk in New York City.

After some fans called out “Deh-mee” during the encounter, Moore clarified how her name is pronounced.

DEMI MOORE GOES VIRAL LOOKING UNRECOGNIZABLE WITH DRAMATIC NEW BOB HAIRCUT

“Remember, it’s ‘Duh-mee,'” the “Landman” star said with a smile.

Demi Moore standing at the Television Academy Saban Center in North Hollywood

Demi Moore recently corrected fans over the pronunciation of her first name. (Lisa O’Connor/AFP)

TRANSFORMATION

Over her decades-long career in Hollywood, Moore repeatedly addressed the same mistake about her name. During a 1988 interview with the NBC affiliate KCRA, Moore corrected TV host Harry Martin when he referred to her by the more common pronunciation of “Deh-mee.”

Martin went on to ask the “Ghost” star about the origin of her name, Moore told him that her parents found it.

“And we’re quite fond of it,” she added.”I think they just pulled it out of a magazine or something.”

Demi Moore smiling at Lancôme Longevity MD Dinner at One World Observatory in New York City

The actress has been clarifying that her name is pronounced “Duh-mee” for decades. (Ilya S. Savenok/Getty Images for Lancôme)

SISSY SPACEK CREDITS STAGE NAME TO HER BROTHERS, SOUTHERN ROOTS

Moore explained that her name is frequently mispronounced, noting that “people get it wrong all the time.” However, she said that the mixup didn’t bother her.

“I have a tough time with it but it’s OK,” she said while smiling.

“So you don’t get mad if I pronounce it then, do you?” Martin asked.

DEMI MOORE REVEALS HER ONE DEMAND BEFORE ICONIC ‘CHARLIE’S ANGELS’ BIKINI SCENE

“No, no,” Moore assured him.

Demi Moore attending the Vanity Fair Oscar Party in Beverly Hills

1988, Moore revealed that people mispronounce her name “all the time.” (Michael Tran/AFP)

Moore also discussed the pronunciation of her name during a 2017 appearance on “The Tonight Show Starring Jimmy Fallon.”

After Fallon pointed out that he “knew a lot of “Deh-mees,” Moore recalled speaking with Demi Lovato about how they pronounce their names differently.

“Demi and I had a great conversation about this because she’s from Texas, and I’m from New Mexico, so our families say our names the same way, but we individually both pronounce it differently,” the Oscar nominee said.

“It works better with our last names,” she explained. “”Like, ‘Deh-mee Lovato’ sounds really good. And ‘Duh-mee’ Moore sounds really good.”

Demi Lovato posing in a black leather jacket at the Rock and Roll Hall of Fame Induction Ceremony in Cleveland

Moore recalled in 2017 that she had a conversation with Demi Lovato about how they pronounce their names differently. (Sara Jaye/Getty Images for The Rock and Roll Hall of Fame)

However, the conversation around Moore’s preferred pronunciation of her name continues resurface every few years when viral clips reach new audiences who have missed earlier explanations.

GOLDEN GLOBES 2025: COMPLETE WINNERS LIST

After Moore won the best actress award at the 2025 Golden Globes for her role in “The Substance,” the clip of her 2017 appearance on “The Tonight Show” was widely circulated on social media with fans sharing their reactions over the different ways that she and Lovato pronounce their names.

“Who else unknowingly pronounced both names exactly the same?” one X user wrote.

CLICK HERE TO SIGN UP FOR THE ENTERTAINMENT NEWSLETTER

“Demi Moore and Demi Lovato do not pronounce their names the same way btw you culturally bankrupt children need to know that,” another added.

DEMI MOORE CLAIMS SHE WAS SHAMED FOR BARING IT ALL IN ‘STRIPTEASE’ FOR THIS REASON

“Ever since I heard Demi Moore pronounce her name I’ve chosen to stan because how could you not?” one fan wrote.

Demi Moore smiling on stage holding a Golden Globe award

The debate over Moore’s name pronunciation resurfaced after her Golden Globe Award win in 2025. (Getty Images)

LIKE WHAT YOU’RE READING? CLICK HERE FOR MORE ENTERTAINMENT NEWS

The debate over Moore’s name pronunciation has also previously made its way into pop culture. During a 1997 episode of “Seinfeld,” Elaine Benes (Julia Louis-Dreyfus) claimed a woman told her she looked like Demi Moore in “Indecent Proposal,” surprising George Constanza (Jason Alexander) when she uses the correct pronunciation of the actress’s name.

“Duh-mee? I thought it was Deh-mee,” George told Jerry Seinfeld.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

“No, I think it’s Deh-mee,” Seinfeld said.

“Really?” George asked before quipping, “I’ve never heard of a suh-mee tractor-trailer.”



Source link

Researchers report Amazon SES abused in phishing to evade detection


Researchers report Amazon SES abused in phishing to evade detection

Cybersecurity firm Kaspersky reports that the Amazon Simple Email Service (SES) is being increasingly abused to send convincing phishing emails that can bypass standard security filters and render reputation-based blocks ineffective.

Although the resource has been leveraged for malicious activity in the past, Kaspersky says the current spike may be due to a large number of AWS Identity and Access Management access keys exposed in public assets.

Because it is a legitimate, trusted resource, phishing operations can leverage Amazon SES to send out malicious emails that pass authentication checks.

Kaspersky researchers note in a report today that they’ve “observed an uptick in phishing attacks leveraging Amazon SES” to deliver links that redirect to a malicious site.

Headers on phishing email
Headers on phishing email
Source: Kaspersky

The researchers believe the main driver of this abuse is the increasing exposure of AWS credentials in GitHub repositories, .ENV files, Docker images, backups, and publicly accessible S3 buckets.

Finding the access keys is typically done in an automated way using bots built on the open-source TruffleHog utility, which is designed to scan for leaked secrets.

Threat actors now rely on automated attacks that streamline secret scanning, permission validation, and email distribution, enabling unprecedented levels of abuse.

“After verifying the key’s permissions and email sending limits, attackers are equipped to spread a massive volume of phishing messages,” Kaspersky explains.

Based on their findings, the researchers say that the phishing quality is high, featuring custom HTML templates that mimic real services and realistic login flows.

The observed attacks include fake document-signing notifications that imitate DocuSign to lead victims to AWS-hosted phishing pages, as well as more advanced business email compromise (BEC) attacks.

Attackers fabricate entire email threads to make the phishing messages appear more convincing and send fake invoices to trick finance departments into making payments.

Fabricated documents supporting the BEC attacks
Fabricated documents supporting the BEC attacks
Source: Kaspersky

By leveraging Amazon SES, attackers no longer need to worry about authentication checks such as the SPF, DKIM, and DMARC protocols.

Additionally, blocking the offending IP addresses that deliver the phishing emails is not an acceptable solution because it would prevent all emails coming through Amazon SES.

Threat actors are no focusing on Amazon SES alone. They are constantly trying to find ways to abuse other legitimate email systems to push phishing messages.

Kaspersky recommends that companies restrict IAM permissions based on the “least privilege” principles, enable multi-factor authentication, regularly rotate keys, and apply IP-based access restrictions and encryption controls.

In a statement for BleepingComputer, Amazon pointed to its security guidance on exposed credentials and protect against unauthorized access to accounts.

The company also stated that it is quick to react on reports of potential terms of service violations and take appropriate action.

“If anyone suspects that AWS resources are being used for abusive activity, they can report it to AWS Trust & Safety,” an AWS Spokesperson told BleepingComputer.

Update [May 4th, 16:59 EST]: Article updated with information from an Amazon statement received after publishing time.

Update [May 5th, 11:50 EST]: Added an update and corrected the lede to reflect that the abuse increase is based on Kaspersky telemetry data and is not a general trend.

article image

AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming.

At the Autonomous Validation Summit (May 12 & 14), see how autonomous, context-rich validation finds what’s exploitable, proves controls hold, and closes the remediation loop.

Claim Your Spot


Source link