Google’s free services are now phishing campaign’s best friends

guest · Nov 19, 2020

Google’s free services are now phishing campaign’s best friends
November 19, 2020
https://www.bleepingcomputer.com/ne...ces-are-now-phishing-campaign-s-best-friends/

Threat actors are abusing Google's free productivity tools and services to create convincing phishing campaigns that steal your credentials or trick you into installing malware.
Unfortunately, if a service is free for us, it is also free for threat actors to abuse them as they see fit.
Threat actors abuse Google services for free
In a new report by email security firm Armorblox, researchers illustrate how threat actors are creating elaborate phishing campaigns using Google services that not only look convincing but also evade detection.

The first Google tool we will look at is the free form creation service called Google Forms that lets anyone create free online surveys that can then be sent to other users.
Click to expand...

Google Firebase is a developer platform used to create mobile and web applications hosted in the cloud.

Threat actors are using Firebase to create phishing landing pages that can include images, dynamic content, and process forms.
Below you can see a phishing email login form created on Firebase.
Click to expand...

Google offers a free web hosting platform called Google Sites that allows users to create simplistic web sites that are served from the sites.google.com domain.
In an example shared by Armorblox, we can see a Google Sites page that hosts a fake Microsoft sign-in form to steal a user's Microsoft account credentials.

Finally, the most common Google service being used in phishing scams is Google Docs. Not only is this service used to redirect recipients to credential theft and accounting scams, but also to deliver malware.
As Google Docs is so heavily used, almost all new documents will bypass secure email gateways until they have been identified as malicious.
Click to expand...

Armorblox: OK Google, Build Me a Phishing Campaign

Google’s mail, workplace productivity, and other business services have helped millions of people simplify and share their work. Open APIs, extensible integrations, and developer-friendly tools mean that entire virtual offices - complete with virtual workflows - can exist in a Google ecosystem. Unfortunately, Google’s open and democratized nature is being exploited by cybercriminals to defraud individuals and organizations of money and sensitive data.
Click to expand...

Log in or Sign up

Google’s free services are now phishing campaign’s best friends

guest Guest

Log in or Sign up

Google’s free services are now phishing campaign’s best friends

guest Guest

Useful Searches