HazyBeacon Weaponizes AWS Lambda Function URLs for Stealth Command-and-Control Relays

HazyBeacon, tracked as CL-STA-1020, is a stealthy cyber-espionage campaign targeting Southeast Asian government networks by abusing AWS Lambda Function URLs as covert command-and-control (C2) relays. Qualys Security researchers have observed attackers leveraging misconfigured serverless features and stolen cloud credentials to blend malicious...

Read the full article at the source.