Warning: Threatening participants now abuse Google Apps scripts in phishing attacks
CISOs need to remind employees to conduct regular safety awareness training sessions to avoid letting them down and read each email closely for clues to the scam.
They also need to remind them that the message that is cautiously popping up is that a message is using tools from well-known brands such as Google, which does not guarantee that the message is safe.
What is Google Apps Script?
Apps Script is a cloud-based JavaScript platform powered by Google Drive, allowing developers to span and automate tasks with Google products. Google says developers can add custom menus, conversations and sidebars in Google docs, tables and tables; write custom features and macros for Google Sheets, publish web applications, or be independently or embedded in Google sites; and interact with other Google services, including Adsense, analytics, calendars, drives, Gmail, and Maps, among others.
