Russia's APT29 Mimics AWS to Steal Windows Credentials

A recent campaign by APT29 involved sending emails from fake Amazon Web Services (AWS) domains to trick recipients into opening malicious attachments containing configuration files for Remote Desktop.