HazyBeacon Weaponizes AWS Lambda Function URLs for Stealth Command-and-Control Relays

HazyBeacon, tracked as CL-STA-1020, is a stealthy cyber-espionage campaign targeting Southeast Asian government networks by abusing AWS Lambda Function URLs as covert command-and-control (C2) relays. Qualys Security researchers have observed attackers leveraging misconfigured serverless features and stolen cloud credentials to blend malicious traffic into trusted AWS infrastructure, making detection significantly harder. Traditional malware relied on […]

The post HazyBeacon Weaponizes AWS Lambda Function URLs for Stealth Command-and-Control Relays appeared first on Cyber Security News.