Multiple fake DKIM identities created

I got many emails about new DKIM identities getting added to my AWS account. I checked SES and I can see all those new garbage identities! All ending with .run . Please help me understand how they got created and what I can do to avoid this in future?