Legion: an AWS Credential Harvester and SMTP Hijacker – Cado Security | Cloud Investigation

https://www.cadosecurity.com/legion-an-aws-credential-harvester-and-smtp-hijacker/