Chinese 'Infrastructure Laundering' Abuses AWS, Microsoft Cloud

Funnull CDN, a China-based content delivery network, is operating an "infrastructure laundering" campaign by renting IP addresses from major cloud providers (AWS and Microsoft Azure) to host hundreds of thousands of mostly DGA-generated domains running investment scams, fake trading platforms, and money-laundering services; providers have suspended many accounts but Funnull repeatedly acquires new IPs, complicating mitigation and prompting recommendations such as enforcing MFA, auditing cloud accounts, and increased provider coordination.