In the past year, there has been a marked increase in the use of legitimate cloud services by attackers, including nation-state actors.