HazyBeacon Campaign Exploits AWS Lambda for Stealthy Cyber Espionage

HazyBeacon (CL-STA-1020) is a stealthy cyber-espionage campaign observed by Qualys that targets Southeast Asian government networks by exploiting misconfigured AWS Lambda Function URLs and stolen cloud credentials to establish covert command-and-control channels; the technique mixes malicious activity into trusted cloud infrastructure, making detection difficult. The report notes significant national-security implications but discloses no CVEs, tools, or indicators of compromise.