Attackers designed TruffleNet to "systematically test compromised credentials and perform reconnaissance across AWS environments," Fortinet AI's ... was then used in a "BEC vendor onboarding W-9 scam" ...