Attackers Abuse Trusted Cloud Services to Hide Phishing Attacks Against Financial Organizations
Brief
Cybercriminals are increasingly weaponizing trusted cloud platforms such as Microsoft Azure, Google Firebase, Google Cloud Storage, Amazon Web Services, and Cloudflare to host phishing infrastructure aimed squarely at the financial sector, making malicious traffic nearly indistinguishable from legitimate business activity.
Security researchers describe this as a structural shift toward what some call Trusted Infrastructure Phishing , where every stage of an attack, from delivery to credential theft, runs through legitimate, enterprise-approved services rather than attacker-owned domains.
Trusted Cloud Services Abused for Phishing
Financial institutions rely heavily on cloud storage, document-sharing tools, and vendor platforms for daily operations, which gives attackers a ready-made attack surface with built-in credibility.