The campaign was first detected in October and is using services like AWS and Azure to hide its tracks and evade detection.
