Legion malware expands scope to target AWS CloudWatch monitoring tool

Cado Security researchers believe Legion was developed in Indonesia with an eye toward selling it to other attackers for exploiting cloud services.

attackers aws cado security cloud cloud security cloud services exploiting identity and access indonesia legion malware monitoring monitoring tool researchers scope security security researchers selling services target tool