AWS SSM Agent: The Unlikely Trojan Horse

The AWS SSM Agent, a commonly used tool to manage AWS resources, has been found capable of being repurposed as a remote access trojan. High privilege access attackers can manipulate the SSM Agent for various malicious activities, as discovered by Mitiga researchers.