GOOGLE APPLICATIONS SCRIPT EXPLOITED IN SUBTLE PHISHING CAMPAIGNS

A new phishing marketing campaign is observed leveraging Google Apps Script to provide misleading content meant to extract Microsoft 365 login credentials from unsuspecting buyers. This process makes use of a trusted Google System to lend reliability to malicious backlinks, therefore increasing the probability of person conversation and credential