As services recover from the recent AWS outage, scammers are taking advantage of the disruption.
While engineers worked to restore normal service, fraudsters began flooding inboxes, phone lines, and social media feeds with phishing attempts, fake tech support messages, and bogus "fixes."
For already-frustrated customers, these schemes add insult to injury, turning a few hours of downtime into a longer-lasting disruption and putting them at risk.
The outage, which began at 00:11 PDT (08:11 BST), involved network connectivity issues at AWS's US-EAST-1 data center in Northern Virginia and affected multiple AWS services until it was eventually resolved at 15:53 PDT (23:53 BST).
The downtime extended across Amazon’s own platforms as well as workplace tools, gaming platforms, food and transportation apps, social media, fitness and lifestyle apps, financial platforms, and several UK government websites that run on the tech giant’s cloud servers.
The extent of the outage not only highlighted our digital dependency and how much we rely on a single cloud provider for everyday digital life, it also laid bare the vulnerabilities that follow in the wake of such an outage, said Vonny Gamot, Head of EMEA at online protection company McAfee.
“AWS' massive outage reminds us just how interconnected our digital world has become. When a single service like Amazon Web Services goes down, it’s not just businesses that feel the impact, it’s consumers trying to access everyday essentials like banking apps, emergency services, or even their favorite platforms like Fortnite and Snapchat.
“The complexity of our shared cloud infrastructure means a glitch in one system can send shockwaves across the internet.”
How Service Disruptions Put Customers—and Enterprises—at Risk
More than six million individuals were reportedly affected, according to security researchers at Cybernews.
Beyond the inconvenience of being unable to access services, such outages can open up customers to scam attacks. At a time when employees are stretched thin by efforts to get systems up and running, businesses also become more vulnerable to security breaches.
“Cybercriminals thrive in the confusion, exploiting the moment with fake support scams, phishing emails, and malicious links posing as fixes,” Gamot said.
Hackers can use AI tools to send emails to customers that appear to originate from an affected organization, often using a spoofed email address or phone number that mimics the organization’s legitimate details.
To help consumers navigate the aftermath safely, Gamot shared the following practical tips:
