The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.