{"id":3323,"date":"2025-02-04T19:26:00","date_gmt":"2025-02-04T19:26:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/here-is-a-rewritten-title-in-50-60-characters-max-in-chinese%e4%ba%91%e8%ae%a1%e7%ae%97%e9%9a%90%e7%a7%81%e6%b3%84%e9%9c%b2aws%e3%80%81%e5%be%ae%e8%bd%af%e4%ba%91%e7%ad%89%e5%9f%ba%e7%a1%80\/"},"modified":"2025-02-04T19:26:00","modified_gmt":"2025-02-04T19:26:00","slug":"here-is-a-rewritten-title-in-50-60-characters-max-in-chinese%e4%ba%91%e8%ae%a1%e7%ae%97%e9%9a%90%e7%a7%81%e6%b3%84%e9%9c%b2aws%e3%80%81%e5%be%ae%e8%bd%af%e4%ba%91%e7%ad%89%e5%9f%ba%e7%a1%80","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/here-is-a-rewritten-title-in-50-60-characters-max-in-chinese%e4%ba%91%e8%ae%a1%e7%ae%97%e9%9a%90%e7%a7%81%e6%b3%84%e9%9c%b2aws%e3%80%81%e5%be%ae%e8%bd%af%e4%ba%91%e7%ad%89%e5%9f%ba%e7%a1%80\/","title":{"rendered":"Here is a rewritten title in 50-60 characters max in Chinese:\n\n“\u4e91\u8ba1\u7b97\u9690\u79c1\u6cc4\u9732:AWS\u3001\u5fae\u8f6f\u4e91\u7b49\u57fa\u7840\u8bbe\u65bd\u6d17\u94b1\u6ee5\u7528”\n\nTranslation:\n\n“Cloud computing privacy leaks: AWS, Microsoft Cloud, etc. infrastructure money laundering abuses”\n\nNote: Please keep in mind that the translation may not be perfect, and the nuances of the original title may be lost in translation."},"content":{"rendered":"\n<\/p>\n

Infrastructure Laundering: How Threat Actors Exploit Mainstream Hosting Providers<\/strong><\/p>\n

Researchers have linked the China-based Funnull content delivery network (CDN) to a malicious practice known as "infrastructure laundering." This technique involves threat actors exploiting mainstream hosting providers such as Amazon Web Services (AWS) and Microsoft Azure to host their malicious websites.<\/p>\n

The Method Behind the Malice<\/strong><\/p>\n

The activity involves threat actors operating "hosting companies" that rent IP addresses from these providers and then map them to their criminal websites. This allows them to maintain a level of anonymity and makes it difficult for law enforcement to track their activities.<\/p>\n

The Discovery<\/strong><\/p>\n

Researchers from Silent Push discovered this practice when they noticed that AWS and Microsoft Azure cloud hosting services are often used in large-scale by threat actors. According to their recently published report, these services are frequently used to host malicious websites.<\/p>\n

The Consequences<\/strong><\/p>\n

The use of infrastructure laundering can have severe consequences. Threat actors are likely using stolen accounts, which may involve the use of stolen or cracked credentials. This makes the use of multifactor authentication (MFA) another potential way to mitigate this type of activity.<\/p>\n

Mitigating the Risk<\/strong><\/p>\n

To mitigate the risk of infrastructure laundering, organizations should review the accounts with access, audit transactions, and educate people on how to spot potential malicious activity within their cloud accounts. By taking these steps, organizations can reduce the risk of falling victim to this type of malicious activity.<\/p>\n

Additional Resources<\/strong><\/p>\n

For more information on infrastructure laundering and how to protect your organization from this type of threat, visit the following resources:<\/p>\n