Send targeted phishing mails.

Our company got hit with this. I guess there's no way to recover from this other than do our best to block these.

How does knowing the AWS username allow you to send a more effective phishing email? Especially if the username is just the user's... name. That's public info.

I can already do that by sending them for root. This seems like trying to make something out of nothing.

Are you stuck in the 70s or something? I can't recall the last time I read email addressed to root.

My friend, the main AWS account is called the root account and its username is root, so your zinger didn't zing.