[Intel]: https://www.lacework.com/blog/androxghost-the-python-malware-exploiting-your-aws-keys/

[timb-machine]

Area

Malware reports

Parent threat

Initial Access, Persistence

Finding

https://www.lacework.com/blog/androxghost-the-python-malware-exploiting-your-aws-keys/

Industry reference

No response

Malware reference

Androxgh0st
wltm

Actor reference

No response

Component

Linux

Scenario

Cloud hosted services