Magecart threat actors have been spotted this week while starting to abuse Salesforce’s Heroku cloud application platform to host their card skimming scripts and to store stolen payment card info. […]

from https://www.bleepingcomputer.com/news/security/salesforce-s-heroku-used-to-host-magecart-skimmers-stolen-cards/