The phishing method is “about as zero-risk” as it gets, says CISO Mike Britton. By incorporating a widely used survey tool, phishers have found another inventive way to get past email security gateways: Google Forms. “From an attacker’s perspective, the effective part is [that] I can pretty much craft it and customize it, because it’sContinue reading “Phishers survey new tactic: Google Forms.”
Category Archives: Google Forms
BazarCall attacks abuse Google Forms to legitimize phishing emails.
A new wave of BazarCall attacks uses Google Forms to generate and send payment receipts to victims, attempting to make the phishing attempt appear more legitimate. BazarCall, first documented in 2021, is a phishing attack utilizing an email resembling a payment notification or subscription confirmation to security software, computer support, streaming platforms, and other well-known brands. TheseContinue reading “BazarCall attacks abuse Google Forms to legitimize phishing emails.”

You must be logged in to post a comment.