GOOGLE APPS SCRIPT EXPLOITED IN SUBTLE PHISHING CAMPAIGNS

A completely new phishing marketing campaign has been observed leveraging Google Apps Script to provide deceptive information made to extract Microsoft 365 login credentials from unsuspecting customers. This technique utilizes a trusted Google System to lend credibility to destructive back links, therefore expanding the likelihood of consumer conve