There were lots of stories of hackers spinning up the largest ec2 instances available to mine bitcoins on anyone's account they could get access to
Not OP, but I've heard of people getting hijacked and finding a bunch of VPSs spun up sending out spam and other malware related stuff. Maybe that's what they mean.