Legion: an AWS Credential Harvester and SMTP Hijacker - Cado Security

Cado Labs researchers recently encountered an emerging Python-based credential harvester and hacktool, named Legion.

Legion: an AWS Credential Harvester and SMTP Hijacker - Cado

CyberWire Daily - Podcast

aws-customer-security-incidents/README.md at main · ramimac/aws

Case Study Continued: Responding to an Attack in AWS - Cado

Legion AWS credential harvester and hijacker analyzed - Help Net

OSINTelligence LLC on LinkedIn: Legion: an AWS Credential

Legion: New hacktool steals credentials from misconfigured sites

Xiph Cyber - Everything you need to know about the Legion hacking tool

CosmicEnergy: OT and ICS malware from Russia, maybe for red

Christopher Doman en LinkedIn: Legion: an AWS Credential Harvester

Updates to Legion: A Cloud Credential Harvester and SMTP Hijacker

Investigating AWS EC2 Compromise CTF by Cado Security - Cado

Automated Analysis of Critical Cloud Infrastructure with Cado and