According to CBR Online, Amazon’s CloudFront has been used for Ransomware attacks. 

Amazon’s CloudFront is being used to host Command & Control (C&C) infrastructure for a ransomware campaign that has successfully hit at least two multinational companies in the food and services sectors, according to a report by security firm Symantec.