AWS traffic hijack: Users sent to phishing site in two-hour cryptocurrency heist