nch subsequent attacks. 
In April 2010, Amazon experienced a Cross-Site Scripting (XSS) bug that allowed 
attackers to hijack credentials from the site.  In 2009, numerous Amazon 
systems were hijacked to run Zeus botnet nodes. 
3.1 Implications 
Account and service hijacking, usually with stolen credentials, remains a top 
threat.  With stolen credentials, attackers can often access critical areas of 
deployed cloud computing services, allowing them to compromise the 
confidentiality, integrity and availab