Telecom
Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms
Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.
Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.
“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.
“Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.
“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”
Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:
Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.
Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.
Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.
Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.
Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.
Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.
Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.
“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”
Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.
Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.
Legend Internet Plc has reported a loss for the six months ended January 31, 2026, as rising operating costs and finance charges weighed on earnings, according to its latest management financial statements filed on the NGX platform.
The company posted revenue of N505.36 million for the period, down from N622.64 million recorded in the corresponding period of 2025, reflecting a contraction in topline performance.
Despite generating a gross profit of N322.99 million, Legend Internet’s profitability was eroded by elevated administrative expenses, which surged significantly to N457.62 million from N166.78 million in the prior year.
This drove the company to an operating loss of N134.63 million, compared to an operating profit of N244.55 million a year earlier.
Finance costs further pressured the bottom line, rising to N64.71 million, while interest income provided only a limited offset.
Consequently, the company recorded a loss after tax of N99.34 million, a sharp reversal from the N239.85 million profit posted in the same period of 2025.
Earnings per share also declined into negative territory, closing at a loss of 11 kobo compared with earnings of 12 kobo in the prior period.
A review of the company’s financial position showed total assets increased to N3.45 billion as of January 2026, up from N3.21 billion in July 2025, driven largely by growth in cash and cash equivalents and receivables.
However, shareholders’ funds weakened to N2.55 billion from N2.80 billion, reflecting the impact of the reported loss and dividend payments.
Cash flow analysis indicates that net cash used in operating activities stood at N237.48 million, highlighting liquidity pressure in the core business.
This was partially offset by financing inflows, including loans, which helped lift cash balances during the period.
Further breakdown showed personnel costs rose markedly to N153.50 million, underscoring increased staff-related expenses, while depreciation and amortisation charges remained significant due to ongoing investments in network infrastructure.
The results underlined the pressure on smaller telecom and internet service providers navigating high operating costs, currency volatility, and infrastructure demands within Nigeria’s competitive digital services market.
Airtel Africa has emerged as the standout large-cap performer on the Nigerian Exchange (NGX), recording a 10 per cent gain in a single trading week and reinforcing its position as one of Africa’s most resilient and valuable telecommunications companies.
The telecoms giant closed the week at ₦3,655.70 per share, up from ₦3,323.40, making it one of the strongest contributors to market performance during a period characterised by selective investor activity and sector rotation.
The strong performance reflects growing investor confidence in Airtel Africa’s business fundamentals, diversified revenue streams, and long-term growth strategy. Analysts note that the company continues to attract attention from investors seeking stable, high-quality stocks capable of delivering sustainable value despite ongoing macroeconomic uncertainties.
Unlike many of the week’s gainers, whose performance was largely driven by speculative trading and short-term market positioning, Airtel Africa’s rise was underpinned by confidence in its operational strength and strategic importance within the telecommunications sector.
Market watchers have identified Airtel Africa as a preferred investment destination due to its strong earnings profile, extensive regional footprint, and exposure to foreign currency-linked revenue streams. These factors have helped position the company as a key stabiliser within the NGX, particularly at a time when investors are increasingly selective in deploying capital.
The company’s performance also highlights the growing importance of telecommunications firms in driving economic growth and digital transformation across Africa. Through continued investments in network expansion, digital services, enterprise solutions, and financial inclusion initiatives, Airtel Africa remains at the forefront of enabling connectivity and economic opportunity for millions of people across the continent.
Beyond its stock market performance, Airtel Africa continues to strengthen its position through investments in digital infrastructure, mobile financial services, and technology-driven solutions that support businesses, governments, and communities. These initiatives have become increasingly important as demand for connectivity and digital services continues to accelerate across Africa.
Airtel Africa’s latest performance underscores confidence in the company’s long-term prospects and its ability to create sustainable value for shareholders. The milestone also reflects the market’s recognition of Airtel Africa’s role in shaping Africa’s digital future through innovation, connectivity, and inclusive growth.
With telecommunications remaining a critical enabler of economic development, Airtel Africa’s strong showing on the NGX serves as another indicator of the company’s continued momentum and leadership within the sector.
AVEVA, a global leader in industrial software, will host the first edition of AVEVA Day Nigeria, on 11 June 2026 at the EKO Hotel, Victoria Island, Lagos.
AVEVA
Built around the theme, “Driving the Transformation: Leveraging Digital Technologies and AI to Achieve Operational Excellence, Increase Efficiency and Reduce Emissions,” the one-day event will bring together industry leaders to discuss how AI, Digital Twin, and cloud-native industrial platforms are transforming the design, construction, and operation of assets.
The event will host AVEVA leadership, technical experts, customers, ecosystem partners, EPCs, and decision-makers from across Nigeria’s energy and process industries.
Nigeria’s industrial sector is entering a new phase with operators under pressure to improve operational reliability, cut emissions, and unlock gas monetisation opportunities cost-effectively. Digital technologies have emerged as a key enabler of this balancing act.
The International Energy Agency’s Africa Energy Outlook highlights the growing role of AI and digital tools in balancing Africa’s energy ambitions with its sustainability goals. At the same time, initiatives such as the African Union’s Digital Transformation Strategy for Africa (2020–2030) and Nigeria’s National Digital Economy Policy and Strategy are helping create the foundation for wider adoption.
Khaled Salah, Vice President – Africa, AVEVA, said: “Nigeria’s industrial economy is one of the most dynamic industrial markets in the EMEA region. As industries navigate growing demands around efficiency, sustainability, and resilience, technologies such as digital twin, industrial AI, and connected ecosystems are becoming central to transformation strategies. Through AVEVA Day Nigeria, we want to bring our global expertise closer to local industry leaders and demonstrate how the convergence of AI and industrial software can help local enterprises compete, and lead, on the world stage.”
Hanno Van Niekerk, Market Leader – Sub Saharan Africa, AVEVA said: “Nigeria has the scale, resources, and industrial ambition to become one of the leading energy and industrial hubs in the region. With continued investments in power infrastructure, and industrial development, the country is well positioned to drive long-term economic growth and strengthen energy access across Africa. At AVEVA, we are proud to support this journey by helping organisations leverage digital innovation to enhance operational performance, accelerate transformation, and advance sustainability goals.”
The event will begin with a welcome note from Khaled Salah, followed by a keynote from Gaurav Panpaliya, Enterprise Architect, AVEVA, on how AI-enabled Digital Twins are guiding industries towards autonomous, sustainable operations, supported by examples from global energy companies.
It will also feature interactive round table discussions hosted by Gururaj Purohit, structured around three focus tracks – Design & Build track, that will engage EPCs, capital project teams, and engineering companies, the Operate & Optimise track covering enterprise visualisation, process optimisation, asset reliability, AI/ML-based predictive analytics, and Predictive Asset Optimisation (PAO) and the IT/OT and Data Management track, focusing on the CONNECT industrial intelligence platform and how it underpins next-generation industrial operations.
Attendees will get a chance to explore the full scope of AVEVA’s industrial intelligence capabilities through a series of focused technical and industry sessions along with dedicated customer and partner presentation slots throughout the day.
Legend Internet Reports Losses despite N505m Revenue
INEC Probes Claims of Leaked Voter Data from CVR System
Ecobank Raises Record $450m in Nature Bond for Africa’s Biodiversity
NPS, New Payment Infrastructure Hits 153,000 Transactions in Pilot Phase
African Electric Vehicle Platform Raises $215m to Scale Electric Mobility in Nigeria, Others
MTN, VDT, Zoracom, Digital Realty Back 2026 Girls in ICT Campaign
Vitel Wireless Partners Fintechs to Expand Access to Services
CPN Begins Crackdown on Quack IT Professionals, Vows Tougher Action against Cybercrime
Nigeria Hit by 24.1m Data Breaches – Surfshark
Kaspersky Identifies Ongoing Supply Chain Attack on Official Daemon Tools Website Distributing Backdoor Malware
Telecom3 days agoNCC Retains Rudman as Chair of Newly Inaugurated IPv6 Council Board, Urges Advancement of Nigeria’s Digital Migration
E-Financial3 days agoNigerian Banks Under Pressure as Bad Loans Hit 8.03% After CBN Policy Shift
E-Financial3 days agoPOS Operators Threaten to Suspend Services over Exclusivity Practice
E-Business2 days agoAI and IoT Hold the Key to Nigeria’s Economic Future – NCC
E-Financial2 days agoBanks Lending to FG Hit N15.66 Trillion in One Year– CBN
Telecom3 days agoMTN, ALTON, Upperlink, NiRA back 2026 Nigeria DigitalSENSE forum, awards
Broadcasting2 days agoGood News for DStv Users: Watch over 160 Channels Without Paying Extra
E-Business2 days agoKaspersky Reports on the Aspects of SOC Effectiveness to Consider for Blind Spot