Infrastructure Laundering: Blending in with the Cloud

Silent Push and reporting by KrebsOnSecurity describe Funnull, a criminal Chinese CDN network that has leveraged Amazon AWS and Microsoft Azure IP space to host and proxy large volumes of scam and gambling sites (including a supply-chain redirect after acquiring polyfill.io). The report highlights "infrastructure laundering"—criminals renting or temporarily acquiring cloud infrastructure to obfuscate origins and evade blocking—ties to organized crime and money laundering, and the operational challenges cloud providers face when abusive customers rapidly cycle accounts and IP space.