GOOGLE APPS SCRIPT EXPLOITED IN SUBTLE PHISHING CAMPAIGNS

A new phishing marketing campaign is observed leveraging Google Apps Script to deliver deceptive articles created to extract Microsoft 365 login credentials from unsuspecting users. This method utilizes a trusted Google platform to lend believability to destructive links, thereby growing the chance of consumer conversation and credential theft.Goog