The attack’s abuse of Cloudflare Tunnels is part of an overall increase in malware delivery via this vector, said researchers.