So abuse taking place at Apple Inc. and Verizon Business - whitelisted as such -
these same entities sometimes also provide cloud servers and mail services,
which are easily abused.
Pay special attention when trusting or distrusting these IPs.
As I wrote in my post, I can’t, I don’t have the files. I sent Bitdefender only VT link for one of these samples, and they added detection. Malware analysts have access to premium VT accounts, which gives them the ability to download malware from VT. The same should apply to Avast’s malware analysts also, I assume. That’s why I shared the VT links here.
Some associated 3rd party marketing solution may have endured a data breach of sorts over time,
which data may have been abused, resulting in such kind of malware.
As some can be further classified as FP’s, one should wait for a genuine verdicht from avast team,
as they decide what their detection database will consist of.
Cloudbases may complicate matters here. Ad-tracking- & script-blocking may protect the end-user.