For example, Microsoft found its makers host additional payloads on Amazon Web Services' S3 and CloudFront services.

Today, it installs an 'unusually persistent' adware threat called Adload, but Microsoft cautions it could be used to distribute other more dangerous payloads in future. Microsoft flagged the malware now as it appears to be under continuous development.