Threat actors now use Legion to steal AWS-specific credentials from web servers to enable email and SMS spam campaigns. A commercial malware tool called Legion that hackers deploy on compromised web ...