The last step of the attack the FBI described on September 1 is a permission prompt drawn by a legitimate cloud provider, and ...