The article mentions that using S3 makes it harder to block. You can't block Amazon S3 without breaking very many things. Presumably the malware author would o

The article mentions that using S3 makes it harder to block. You can't block Amazon S3 without breaking very many things. Presumably the malware author would open an AWS account with a stolen or prepaid credit card. They could probably even get away with using AWS's free tier. Or they could even abuse a random web service that uploads data to predictable locations on S3.