Job scam uses fake Google Forms site to harvest Google logins

A phishing campaign impersonating Google Forms (using the subdomain forms.google.ss-o.com and a generation_form.php script) distributed fake job-application forms that collect names, emails and then redirect victims to id-v4.com to capture Google credentials; Malwarebytes observed and blocked the domains and provided detection and user-protection guidance.