https://www.cadosecurity.com/legion-an-aws-credential-harvester-and-smtp-hijacker/