SentinelOne researchers revealed that WIP26 is using public cloud infrastructure for distributing malware, storing stolen data, and as a command-and-control centre