Telecom
Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms
Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.
Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.
“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.
“Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.
“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”
Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:
Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.
Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.
Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.
Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.
Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.
Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.
Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.
“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”
Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.
Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.
A recent Groupe Spécial Mobile Association (GSMA) digital economy report has cast a spotlight on the significant contributions of Nigeria’s telecom sector to the nation’s GDP, highlighting its crucial role in driving economic growth and development.
Released amidst growing interest in the Nigerian telecom landscape, the report provides a comprehensive analysis of the sector’s impact on the country’s economic metrics. Key findings reveal that in 2023 alone, the telecom sector directly contributed 8% to Nigeria’s total GDP. However, when factoring in the wider ICT industries’ value-added contributions, this figure surged to an impressive 13.5%.
Beyond mere numbers, the report delves into the intricacies of the telecom sector’s influence on various economic sectors. It elucidates how the mobile industry’s cumulative contribution to Nigeria’s GDP reached an estimated 20 trillion NGN in 2023, accompanied by substantial tax revenue contributions totalling 2.8 trillion NGN. Such figures further highlight the sector’s role in driving fiscal revenues and national economic stability.
Moreover, the report sheds light on the transformative potential of the telecom sector in enabling digitalisation across key industries. Projections indicate that by 2028, sectors such as agriculture, manufacturing, transport, trade, and government are poised to witness a remarkable GDP increase of approximately 2 percentage points.
This surge is expected to generate an additional NGN 1.6 trillion in tax revenue, marking a significant milestone in Nigeria’s quest for economic diversification and resilience.
“The telecommunications sector is the backbone of the digital economy. We have a strong appreciation of the fact that if we are able to improve the business environment and invest in the sector, we can continue to improve the level of productivity.
A country like Nigeria has significant opportunities to contribute to the world, but this is impossible without diversifying the economy”. Dr. Bosun Tijani, Minister of Communications, Innovation and Digital Economy added.
The report also highlights the vital role of 5G networks in enhancing operational efficiency across sectors through real-time data transmission and remote monitoring.
It spotlights the immense potential of digitalisation in sectors like manufacturing and trade, with the capacity to add trillions in industry value and generate substantial employment opportunities and tax revenues.
Despite these promising revelations, the report also acknowledges the challenges faced by the telecom sector, particularly its capital-intensive nature.
The report’s findings beckon a clarion call for concerted efforts to leverage the telecom sector’s potential as a catalyst for economic advancement. With the right policies and investments, Nigeria stands poised to harness the full spectrum of opportunities offered by its vibrant telecom landscape, driving inclusive growth and prosperity for all.
While the advocacy for tariff increase remains under deliberations, revelations in the latest Groupe Spécial Mobile Association (GSMA) digital economy report have watered the ground for an increased tariff increase advocacy. The report, offering a deep dive into the sector’s dynamics, provides compelling arguments for adjusting tariffs to ensure sustainability and growth.
L-R: Juergen Peschel, Chief Executive Officer, 9Mobile; Dr. Bosun Tijani, Honourable Minister of Communications, Innovation, & Digital Economy; Dr. Aminu Maida, Executive Vice Chairman, Nigerian Communications Commission; Gbenga Adebayo, Association of Licensed Telecommunications Operators of Nigeria (ALTON); Bella Disu, Executive Vice Chairperson, Globacom; Karl Toriola, Chief Executive Officer, MTN; Angela Wamola, Head of Sub-Saharan Africa, GSM Association (GSMA); Ibrahim Dikko, Chief Executive Officer, Backbone Connectivity Networks Nig. Ltd.; at the GSMA Nigeria Digital Economy Report launch in Abuja on May 9 2024.
Highlighted in the report is the telecom sector’s significant contribution to Nigeria’s GDP. In 2023 alone, it accounted for 8% of the nation’s total GDP, a figure that swelled to 13.5% when considering the broader ICT ecosystem. The mobile industry’s overall contribution to GDP was estimated at a staggering 20 trillion NGN, with substantial tax revenues of 2.8 trillion NGN.
The sector’s potential to drive digitalisation across various domains is of paramount importance. The report projects a significant boost in GDP across sectors like agriculture, manufacturing, transport, trade, and government, translating into nearly 2 million jobs and an additional NGN 1.6 trillion in tax revenues by 2028.
The promise of 5G networks is poised to revolutionise operations, particularly in critical sectors like oil and mining, with real-time data transmission and remote monitoring enhancing efficiency. Digitalisation, especially in manufacturing and trade, holds immense potential for value addition and job creation, promising billions in additional tax revenues.
Despite Nigeria’s noteworthy internet usage figures, with 29% of the population regularly online, the sector faces challenges. The country boasts the lowest-cost data baskets in Africa, yet maintaining competitive mobile data network speeds remains essential. With an average speed of 21Mbps, Nigeria’s performance is comparable to neighbouring countries, underscoring the need for sustained investments.
However, sustaining this growth requires recognizing the capital-intensive nature of the telecom sector. Operators must continually invest in network maintenance and expansion, necessitating a conducive regulatory environment that ensures fair returns on investments.
Chairman, Association of Licensed Telecom Operators of Nigeria (ALTON), Gbenga Adebayo, commenting during the report launch, said, “We raised several issues on the state of affairs of the telecom industry, and among the challenges articulated is the return on investment, stability of the infrastructure and the need for pricing rights. As an ecosystem, tariff hike is one of the sensitive issues affecting the telecom sector and has to be addressed by all stakeholders. We need to look at the state of affairs of the industry and examine holistically. There are ongoing obligations to our end users including infrastructure security. Tariff increase is a solution to solve multiple challenges of the telecom industry.“
The GSMA report positions the ongoing tariff adjustment deliberations as a strategic move to secure the sector’s long-term viability. With Nigeria’s digital future at stake, finding a balance between affordability for consumers and sustainability for operators is paramount to ensure continued growth and innovation in the telecom landscape.
Gbenga Adebayo, chairman, Association of Licensed Telecom Operators of Nigeria (ALTON) has said the telecoms sector should not be a palliative to solve economic woes.
Gbenga Adebayo, chairman of ALTON,
He made this call during his address at the Groupe Spécial Mobile Association (GSMA) digital economy report launch which took place in Abuja.
According to Adebayo, the telecom industry faces numerous challenges that hinder its growth and development.
He emphasized the need for sustainable investment, effective regulation, and a conducive business environment to drive progress.
The GSMA digital report, launched May 9th 2024, 2024, highlights the telecom’s 8 percent contribution to Nigeria’s GDP and 13.5% when considering the broader ICT ecosystem.
The report also highlights the significant challenges plaguing the industry including investment challenges, right of way, multiple taxation, and regulation.
Adebayo highlighted the existence of over 45 associated charges and levies on operators, despite the supposed removal of right of way costs.
He said that it creates an unfavorable business environment, discouraging investment and hindering the industry’s ability to deliver quality services.
He also stressed that regulatory interference and the lack of independence for the regulator exacerbate the problem.
The price review should be a simple regulatory process.
The public debate this has gained makes it appear the industry is insensitive to people’s concern.
“While the government tries to provide incentives for the public on account of ongoing macroeconomic headwinds, the telecoms sector should not be used as a palliative to solve the people’s problem. We must price right to sustain the industry; we must price right to have the right investment,” , Adebayo said.
He concluded that the industry must be allowed to operate sustainably, with the right investment and regulation, to deliver quality services and drive economic progress; encouraging stakeholders, including policymakers, regulators, and operators, to work together to address the challenges facing the industry, in order to drive economic growth, and fulfill its potential as a critical sector in Nigeria’s economy.
CBN Misinterprets Cyber Security Provisions – Falana
NAN, SLTV to Partner on Local TV Content Promotion
Nigerians to Pay More to Obtain Multipurpose National ID Cards in 46 Hours
Wema Bank Launches CoopHub, Digital Solution for Cooperative Societies
SEC Issues Rules on Issuance, Allotment of Private Companies’ Securities
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
IMF says Rising Cyber Threats Pose Serious Concerns for Financial Stability
Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC
Financial Firms Lost $2.5Bn To Cyberattacks in 4 Years – IMF
FIRS Rakes in N12.3 Trillion in 2023 – Adedeji
News2 days agoPalmPay Bolsters Lagos Agriculture Initiative with Effortless Payment Solutions
Telecom2 days agoAirtel Africa Records Loss as Revenue Falls on Naira Devaluation
E-Business2 days agoKaspersky Reports Show Every Third Cyber Incident was Due to Ransomware
Telecom2 days agoAccess Bank, Mastercard Join Forces to Expand Opportunities for Cross-Border Payments for African Businesses and Consumers
Telecom2 days agoThe Telecoms Sector Cannot be Used Palliative for Economic Woes –Adebayo
E-Financial2 days agoOPay clarifies New CBN directive, Reassures Customers
E-Financial2 days agoFBNQuest Merchant Bank Reports Strong Financial Performance and Strategic Growth Initiatives in 2023
Telecom2 days agoGoogle’s Hustle Academy Re-launches with AI Focus to Empower African SMBs