Malicious actors are increasingly favoring partial use of cloud services rather than fully migrating their infrastructure.