https://www.sentinelone.com/blog/cloud-credentials-phishing-malicious-google-ads-target-aws-logins/