Google App Scripts Become the Latest Way to Establish Credibility and Automate Phishing Attacks

Check Point researchers discovered a phishing campaign sending over 360 multilingual emails that use Google App Scripts (script.google.com) as the destination for malicious links to increase perceived legitimacy and automate actions; although the emails appear poorly written and may be caught by trained users, abuse of the Google platform could allow messages to bypass scanners and deceive less-aware recipients.