Hackers Impersonate IT Teams Using Google Apps Script in Phishing Attacks to Exfiltrate Data and Extort Companies, Google Says

Cybercriminals are exploiting Google Apps Script in sophisticated phishing campaigns to target companies. These threat actors impersonate IT teams and use fake emails to deceive employees into downloading malware that extracts sensitive data. Google has identified this tactic as a method for extorting businesses by gaining unauthorized access to accounts through modified applications.