Phishing$-$llke attempts that present users a fake usage bill of the cloud

provider is an example of a

$$ Cloud to user attack surface

O User to service attack surface

Cloud to service attack surface

$=>$ User to cloud attack surface