Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR