Telecom
Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms
Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.
Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.
“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.
“Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.
“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”
Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:
Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.
Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.
Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.
Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.
Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.
Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.
Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.
“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”
Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.
Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.
Telecom
Paradigm Initiative Champions Digital Rights and Inclusion at Africa IGF 2025 in Dar es Salaam
Paradigm Initiative (PIN) has reaffirmed its commitment to advancing digital rights and inclusion across Africa following its active participation in the 2025 Africa Internet Governance Forum (AfIGF), held in Dar es Salaam from May 29 to 31.
The forum convened diverse stakeholders from governments, civil society, the private sector, and academia to explore pressing internet governance issues under the theme “Building a Resilient Digital Ecosystem that Supports Africa’s Sustainable Growth and Global Leadership.”
PIN’s delegation contributed to conversations around digital security, digital rights and inclusion policy and compliance, emerging technologies, global governance, highlighting digital threats and making recommendations for an inclusive and rights-respecting digital landscape. Drawing from its research and advocacy efforts across the continent, the organisation offered practical policy recommendations aimed at fostering an open, secure, and human rights-respecting digital environment.
“The Africa IGF continues to serve as a critical space for shaping Africa’s digital future. We were pleased to contribute insights and amplify the urgent need for inclusive and rights-centric digital governance,” said ‘Gbenga Sesan, Paradigm Initiative’s Executive Director.
During the forum, PIN hosted and participated in multiple sessions, including: A panel on protecting civic space online, a workshop on bridging the digital divide through inclusive policies, and bilateral meetings with regional and global partners on shaping digital governance frameworks in the lead-up to key global internet governance conversations.
PIN’s presence at the AfIGF 2025 not only spotlighted emerging digital threats but also underscored its commitment to ensuring that all technological advancements and policies globally translate into greater digital freedoms and opportunities, not restrictions.
As part of its ongoing advocacy, the organisation will continue to engage with stakeholders across sectors to ensure that digital transformation in Africa is anchored in rights, equity, and inclusion.
MTN Nigeria today held the opening ceremony for the 2025 edition of 21Days of Y’ello Care, the company’s annual employee volunteerism initiative.
This year’s campaign, themed “Connecting at the Roots – Connecting Communities through Digital Tools,” will run from June 1 to June 21, 2025, and focuses on supporting communities that continue to face barriers to digital access and connectivity.
MTN Nigeria kicked off on Sunday June 1 with trainings across different locations in Lagos where staff of the company volunteered to delivered training in valuable areas such as digital marketing and personal branding and employability skills.
In line with the Group-wide campaign theme, MTN Nigeria is implementing a series of grassroots initiatives aimed at expanding digital inclusion and connectivity in underserved areas.
Planned activities include equipping schools and community youth centres with devices, digital literacy workshops, deployment of community Wi-Fi access points, support for digital entrepreneurship and the establishment of an all-in-one Y’ello Pods across the country that will provide a digital hub for learning and support financial inclusion.
Speaking at the opening ceremony held in Lagos, Karl Toriola, Chief Executive Officer, MTN Nigeria said, Y’ello Care matters to us because we’re a digital company and we’re operating in an environment where there are so many needs. At MTN Nigeria, we care, and we want to show our direct connection and responsibility to the communities we operate in.
Now in its 18th year, Y’ello Care is a groupwide flagship MTN employee volunteering initiative that encourages MTNers to volunteer their time and expertise to support positive social change.
The campaign reflects MTN’s purpose to enable the benefits of a modern connected life for everyone and is anchored in the company’s core values.
In 2024, in a remarkable demonstration of corporate volunteerism, MTN staff, through the Y’ello Care initiative, reconstructed a school block at Iwerekun Community High School, Lakowe. This effort has restored hope and significantly improved learning conditions for both students and teachers.
For further information, updates on “21 Days of Y’ello Care”and MTN Nigeria’s commitment to social development, please visit yellocare.ng or follow us on social media.
Fresh, on-the-ground evidence from health planners and climate analysts in Rwanda, Nigeria and South Africa shows how the Open Buildings dataset, which maps more than 1.8 billion structures, is helping frontline projects close service gaps and strengthen community resilience.
Across the continent, artificial-intelligence tools are graduating from pilots to public-service workhorses, powering everything from crop-price forecasts to live language translation. Open Buildings—developed by researchers at Google Research Africa—is part of that shift, proving that open, locally guided AI can turn sparse data into timely decisions without locking African problem-solvers behind paywalls or proprietary gates.
In Rwanda, the Ministry of Health and Kigali-based Sand Technologies resited rural clinics with help from the dataset. Their new blueprint aims to bring 92% of citizens within a 30-minute reach of care, trimming journeys that put mothers and newborns at risk.
Across Northern Nigeria, epidemiologists at AFENET and geographers from WorldPop uncovered 10,250 buildings, guiding vaccinators who reached 70% of the zero-dose and under-immunized children identified through the mapping in just six months.
Meanwhile, the World Resources Institute (WRI) has already applied this flood-risk modelling in Dire Dawa, Kigali, Musanze, Gqeberha and Johannesburg, combining two-dimensional hydraulic simulations with building footprints to create block-by-block exposure maps.
The need is pressing: Nairobi is still recovering from the May 2024 floods that displaced more than 278 000 residents, while Johannesburg’s rapid growth along the flood-prone Jukskei River continues to heighten vulnerability
These projects tackle challenges felt across the continent. Africa still has about 8.7 million “zero-dose” children who receive no routine vaccines each year, while the urban population is projected to almost double to nearly one billion people by 2035— forcing new homes into high-risk floodplains and informal settlements.
By giving ministries, city engineers and NGOs a street-level view of where communities are growing and how they change over time, the Open Buildings dataset lets limited budgets flow to the people and places that need them most.
Dr Aisha Walcott-Bryant, Research Scientist & Head, Google Research Africa, “These projects show what happens when local expertise meets open, scalable technology: mothers reach clinics sooner, children receive long-overdue vaccines, and city planners get ahead of the next flood.
“We’re thrilled to stand beside partners who turn data into decisive action, proving that AI’s highest calling is to solve real-world challenges.”
From lifesaving clinics to climate-smart cities, these projects show how open AI is fast becoming Africa’s quiet engine for equitable progress.
The Open Buildings dataset—along with sample code, tutorials and its new 2.5D layer—is freely available at g.co/openbuildings.
Nigeria Strengthens Cybersecurity, Launches National Cleanup Plan
ARCON to Crackdown on AI-Generated Fake Ads
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
Microsoft Sacks 300 Staff as Job Cut Hits 6,300
FG, UNICEF Partner to Train 20m Youths on Digital Skills
E-Business3 days agoFarmers to Get Identity Card for Loans, Inputs
Telecom3 days agoARCON Probes 9mobile over Alleged N1Bn Advertising Debt
E-Business2 days agoNIMC Plans to Register 95 Percent Nigerians by December
News2 days agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
News3 days agoSERAP Sues NNPC over Alleged Missing ₦500Bn, Seeks Accountability
Telecom2 days ago9mobile Nigeria Inks Agreement to Roam with MTN
E-Business3 days agoDyna.Ai Launches Operations in Nigeria
Telecom2 days agoBanks, Telcos to Start Deducting USSD Charges from Airtime Today