Legion AWS credential harvester and hijacker analyzed

2023-05-24 10:00

Researchers from Cado Labs recently encountered an update to the emerging cloud-focused malware family, Legion.

This sample iterates upon the credential harvesting features of its predecessor, with a continued emphasis on exploiting PHP web applications.

News URL

https://www.helpnetsecurity.com/2023/05/24/legion-aws-credential-harvester-hijacker-analyzed-video/

#AWS #credential

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.