Cloud service abuse for command and control

Malware that uses legitimate hosted services, such as spreadsheets, code-sharing sites or messaging APIs, to receive instructions and send out data so its traffic looks like normal use.