Moroccan Cybercrime Group Atlas Lion Hiding in Plain Sight During Attacks on Retailers

The Atlas Lion group used stolen credentials to enroll its own virtual machines (VMs) into an organization’s cloud domain, according to researchers at cybersecurity firm Expel.