Connect with us

Telecom

Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.

Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.

“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.

 “Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.

“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”

Advertisement

Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:

Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.

Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.

Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.

Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.

Advertisement

Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.

Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.

Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.

“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”

Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.

Advertisement

Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.

 

 

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

General News

MENXTT TECH NG Offers Affordable Dell Laptops with Flexible Payment Plans

Published

on

Kindly share this post

MENXTT TECH NG, a Lagos-based technology company, has launched an initiative to make quality Dell laptops more affordable for Nigerians through flexible payment plans and extended warranty support.

MENXTT TECH NG Offers Affordable Dell Laptops with Flexible Payment Plans

The company said the initiative was aimed at helping students, entrepreneurs, professionals and small businesses acquire reliable computing devices despite rising technology costs.

According to the company, customers can now purchase premium pre-owned Dell Latitude, Dell Precision and Dell Inspiron laptops at competitive prices, with selected models available under staggered payment arrangements.

The laptops, it said, are designed to meet the needs of users ranging from students and office workers to architects, engineers, software developers, graphic designers and video editors.

Speaking on the initiative, the Co-Founder of MENXTT TECH NG, Mr Anthony Emeka Nwosu, said access to quality technology should not be limited by financial constraints.

Advertisement

“A laptop is no longer a luxury; it is an essential tool for education, business and career development.

“Unfortunately, many people are forced to settle for unreliable devices because of the high cost of new laptops.

“At MENXTT TECH NG, we want to bridge that gap by providing durable Dell business laptops at affordable prices, backed by a full one-year warranty and flexible payment plans.

“We want every student, entrepreneur, freelancer and business owner to have access to technology that helps them succeed,” he said.

Nwosu explained that every laptop undergoes comprehensive testing before delivery and comes with a one-year warranty, an original charger, a complimentary laptop bag, Windows 11 operating system and Microsoft Office Suite pre-installed.

Advertisement

He added that the company, an authorised Bitdefender Antivirus reseller in Nigeria, also installs genuine Bitdefender security software on every system to protect customers against cyber threats.

According to him, customers requiring additional productivity tools can also have licensed Foxit PDF software installed on their devices.

Nwosu said the flexible payment option was introduced in response to prevailing economic realities, enabling customers to spread payments over an agreed period.

He noted that the arrangement would make it easier for students, startups and growing businesses to acquire quality computers without placing excessive pressure on their finances.

Beyond laptop sales, the company provides information technology consultancy, computer repairs, software licensing, cybersecurity solutions and digital transformation services to organisations across Nigeria.

Advertisement

He reaffirmed the company’s commitment to supporting Nigeria’s digital economy by making dependable computing devices and enterprise technology solutions more accessible to individuals and businesses.

According to him, the initiative reflects MENXTT TECH NG’s vision of combining affordability, quality products and professional after-sales support to help more Nigerians participate in the country’s expanding digital ecosystem. (NAN)

Kindly share this post
Continue Reading

Telecom

NITDA Calls for Collaboration to Harness Emerging Technologies for Inclusive Growth

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has called for stronger collaboration among government, industry, academia and technology professionals to accelerate digital innovation and drive inclusive economic growth in Nigeria.

NITDA Calls for Collaboration to Harness Emerging Technologies for Inclusive Growth

Dr. Aristotle Onumo, Director, Stakeholder Management and Partnerships, representing the Director General of NITDA, delivers a goodwill message at the 20th International Conference on Technology and Computing (RISE 2026) in Jos, reaffirming the Agency’s commitment to fostering digital innovation, strategic collaboration, and a technology-driven future for Nigeria.

The agency made the call at the 20th Nigeria Computer Society (NCS) International Conference 2026, held in Jos, Plateau State, where stakeholders examined strategies for leveraging emerging technologies to strengthen national development.

Speaking on behalf of the Director-General of NITDA, Mr Kashifu Inuwa, the agency’s Director of Stakeholders Management and Partnerships, Dr Aristotle Onumo, said Nigeria’s digital transformation would depend on sustained investment in innovation, digital skills, research and strategic partnerships.

According to him, collaboration across the public and private sectors is essential to translate emerging technologies into practical solutions capable of improving governance, creating jobs and enhancing the country’s global competitiveness.

Onumo said NITDA remained committed to implementing its Strategic Roadmap and Action Plan through initiatives that promote digital literacy, research and development, innovation ecosystems, cyber sovereignty and emerging technologies.

He added that the agency was expanding opportunities for innovators, entrepreneurs and startups through platforms designed to encourage collaboration, investment and technology-driven enterprise.

Advertisement

“We are transforming Digital Nigeria into the nation’s foremost innovation platform where policymakers, investors, startups, researchers and technology companies can collaborate to accelerate economic growth and digital transformation,” he said.

He urged innovators, startup founders and technology professionals to participate actively in the forthcoming Builders Summit by showcasing indigenous solutions capable of addressing Nigeria’s development challenges.

Declaring the conference open, the Governor of Plateau State, Mr Caleb Mutfwang, described digital technology as a critical driver of governance and economic development.

Mutfwang said his administration had adopted digital solutions to improve public service delivery, modernise government operations and enhance internally generated revenue.

He also identified technology as a key enabler for agricultural transformation, increased productivity and improved food security, urging participants to ensure that deliberations at the conference translate into practical outcomes for national development.

Advertisement

Earlier, the President of the Nigeria Computer Society (NCS), Prof. Muhammad Sirajo, said the conference was organised to strengthen collaboration among policymakers, researchers, regulators, technology professionals and industry leaders.

Sirajo said the conference, with the theme “Harnessing Digital Innovation and Emerging Technologies for Inclusive Growth and Economic Renaissance (RISE 2026),” focused on exploring how innovation could accelerate Nigeria’s socio-economic development.

He identified artificial intelligence, blockchain, cloud computing, cybersecurity and robotics as among the technologies shaping the future of economies across the world.

According to him, Nigeria’s youthful population and expanding digital ecosystem provide a strong foundation for building a globally competitive economy through sustained investment in digital infrastructure, innovation and skills development.

The conference attracted government officials, regulators, academics, development partners, technology professionals and private-sector stakeholders to deliberate on policies and innovations aimed at accelerating Nigeria’s digital transformation and inclusive economic renaissance.

Advertisement

Kindly share this post
Continue Reading

Telecom

Hon. Minister Dr. Kingsley T. Udeh and ASUS To Unveil First of a Kind Flagship Store in West Africa

Published

on

Kindly share this post

In a landmark moment for Nigeria’s technology retail sector, the Honourable Minister of Innovation, Science and Technology, Dr Kingsley Tochukwu Udeh SAN, will on Monday, August 3rd, commission a landmark ASUS Flagship Store in partnership with Nigeria’s leading e-commerce group Konga. The state-of-the-art facility is widely regarded as the first initiative of its kind in West Africa.

Hon. Minister Dr. Kingsley T. Udeh and ASUS To Unveil First of a Kind Flagship Store in West Africa

The commissioning will witness the visit of senior executives from the world-renowned technology brand to Nigeria, including EMEA General Manager, Mr. Aaron Tsai, alongside other. One of the purposes of their visit is to reinforce the strategic partnership with Konga and solidify the collaboration between both organisations, further demonstrating ASUS’ commitment to the Nigerian market.

The event is expected to also bring together key stakeholders from government, the technology industry, business community, and the media for what promises to be a defining moment in the evolution of technology retail in the region.

The development comes as Konga continues to accelerate its strategic partnerships with some of the world’s leading technology brands.

For years, Nigerian consumers have demanded more than just access to genuine technology products. They have increasingly sought immersive experiences, expert guidance, after-sales support, and greater confidence when making technology investments. The next chapter in this journey appears to address many of these expectations in a bold and innovative way.

Advertisement

The forthcoming announcement is expected to bring together global innovation in a manner that reflects the changing realities of today’s technology consumer. It also reinforces the growing confidence that leading international technology companies continue to place in Nigeria as one of Africa’s most strategic digital markets.

Industry analysts note that partnerships of this nature are becoming increasingly important as consumers place greater emphasis on authenticity, hands-on product experiences, technical support, and trusted purchase channels. Beyond selling devices, the future of technology retail lies in building complete customer experiences.

As anticipation builds for Monday, one thing is certain: the ASUS-Konga partnership promises to set new standards for tech retail in West Africa, elevating customer experience and reinforcing Nigeria’s digital transformation narrative.

Kindly share this post
Continue Reading

Trending