HP Wolf Security threat research team sees cybercriminals using legitimate cloud providers to host malware, and switching up file and script types to evade detection tools.
https://www.securitymagazine.com/articles/96307-attackers-exploiting-zero-day-vulnerability-before-enterprises-can-patch
