According to Enea, these campaigns use cloud storage platforms to host malicious websites, sending links via SMS to bypass firewalls