Security News > 2025 > May > Threat actors abuse Google Apps Script in evasive phishing attacks

2025-05-29 16:25
Threat actors are abusing the trusted Google platform 'Google Apps Script' to host phishing pages, making them appear legitimate and eliminating the risk of them getting flagged by security tools. [...]
News URL
Related news
- Google fixes Android zero-days exploited in attacks, 60 other flaws (source)
- Who's calling? The threat of AI-powered vishing attacks (source)
- iOS devices face twice the phishing attacks of Android (source)
- Windows NTLM hash leak flaw exploited in phishing attacks on governments (source)
- Phishers abuse Google OAuth to spoof Google in DKIM replay attack (source)
- Three Reasons Why the Browser is Best for Stopping Phishing Attacks (source)
- Phishing detection is broken: Why most attacks feel like a zero day (source)
- DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack (source)
- Google: 97 zero-days exploited in 2024, over 50% in spyware attacks (source)
- Low-tech phishing attacks are gaining ground (source)