Credential harvesting tool Legion targets additional cloud services
Threat actors now use Legion to steal AWS-specific credentials from web servers to enable email and SMS spam campaigns.
Amazon Simple Email Service Cado Security Webhost Manager Virus Total Simple Mail Transfer Protocol Amazon Cloudwatch
Source: csoonline.com