Legion: New hacktool steals credentials from misconfigured sites

A new Python-based credential harvester and SMTP hijacking tool named ‘Legion’ is being sold on Telegram, allowing cybercriminals to automate attacks against online email services. […]