Telecom
Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms
Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.
Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.
“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.
“Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.
“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”
Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:
Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.
Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.
Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.
Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.
Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.
Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.
Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.
“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”
Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.
Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.
The need for Nigeria to think outside the box in its need to drive towards global relevance with innovations and scientific developments will be on the front burner at the NITRA Innovative & Scientific Conference scheduled to hold on Thursday July 23, 2026 in Ikeja, Lagos.
NITRA
The Nigerian Communications Commission (NCC) will lead other delegates to discuss and take far-reaching decisions at the event, which has its theme as “Bridging Nigeria’s Digital Divide With Scientific Innovation”.
Other companies that have indicated interest in partnering with NITRA include mobile communications company, Tecno; Africa’s premier end-to-end AI solutions company, Hyperspace; and telecommunications data infrastructure company, Digital Realty.
Speaking on the proposed event, the Chairman, Nigeria Information Technology Reporters Association (NITRA), Chike Onwuegbuchi noted that the event will seek to create a platform for government and private organisations to deliberate on policies around scientific innovations in Nigeria, challenges, place of indigenous and foreign collaboration, roles of each stakeholder, and grassroots development in that regard, among others.
According to him: “The Federal government, with series of programmes and partnerships, has established the urgent need to create an ecosystem that thrives on scientific innovation, breeding institutions and individuals with a target of placing the country at the fore-front of Next-Gen development.
It is a known fact that digital and scientific innovations are crucial, not only to the survivability of a nation, but also to the sustainability of its growth and development, with significant effect on economic strength, global image, defense and security, government capabilities to function, and public health and safety, communication and digital footprint, among others.
The federal government is actively driving scientific innovation to foster economic diversification and build a $1 trillion economy by 2030. Efforts are heavily focused on commercializing research, establishing massive research funds, and funding strategic infrastructure, particularly in technology, biotechnology, and healthcare. Core government initiatives and policies include the newly instituted National Research and Innovation Development Fund (NRIDF), which aims to mobilize about $500 million annually to support research and the commercialization of scientific outputs; and the Nigeria Genomic City, a multi-ministerial initiative aimed at transforming Nigeria into a leading hub for genomics, precision medicine, and biotechnology. It is designed to protect indigenous data, stimulate artificial intelligence in health, and develop a highly skilled scientific workforce.
According to the General Secretary of NITRA, Mr. Chidiebere Nwankwo, the forum will also be a vehicle to propagating the views of decision makers to the public, thereby furthering the cause of public awareness and information dissemination on the topic.
The focus, he said will be on how Nigeria can sustain digital innovative growth and scientific development in Nigeria
The board of global payments company, PayPal, says a 53 billion dollars takeover offer from financial technology firm, Stripe, and private equity company, Advent International, does not adequately reflect the company’s long-term value.
PayPal
According to reports, the proposed acquisition, valued at 60.50 dollars per share, remains under consideration, with the board yet to formally respond to the offer.
The directors are said to be evaluating not only the financial value of the proposal but also the structure of the financing, the timeline for completing the transaction and the likelihood of obtaining regulatory approvals.
They are also considering the possibility of competing bids emerging.
Although the offer represents a premium of about 28 per cent above PayPal’s recent share price, the board believes the company could deliver greater value to shareholders if its ongoing turnaround strategy succeeds.
Following reports of the bid, PayPal shares gained about two per cent to close at 56.73 dollars.
Sources familiar with the discussions said Stripe and Advent have secured approximately 50 billion dollars in debt financing from JPMorgan and Morgan Stanley, while both firms would jointly contribute 17 billion dollars in equity.
Under the proposal, the two companies would jointly own PayPal instead of dividing its operations.
PayPal, Stripe, Advent International, JPMorgan and Morgan Stanley have all declined to comment on the proposed transaction.
The discussions come as PayPal seeks to strengthen its business after years of increasing competition from rivals including Apple Pay, Google Pay and emerging financial technology firms.
The company, which was valued at about 360 billion dollars in 2021, now has a market capitalisation of approximately 36 billion dollars.
Since assuming office as Chief Executive Officer in March 2026, Enrique Lores has embarked on a restructuring programme aimed at improving operational efficiency and restoring growth.
The restructuring includes the creation of three business divisions comprising Checkout, Venmo and Consumer Financial Services, and Payments and Crypto.
The company is also targeting 1.5 billion dollars in cost savings through the deployment of artificial intelligence technologies.
PayPal’s latest financial results indicated signs of recovery, with first-quarter revenue rising seven per cent year-on-year to 8.35 billion dollars, while total payment volume increased by eight per cent to 464 billion dollars.
If approved, the transaction would combine two of the world’s largest digital payments companies.
The combined business would process an estimated 3.7 trillion dollars in annual payment volume, significantly strengthening its position in the global online payments market.
However, analysts expect the proposed acquisition to face intense regulatory scrutiny because of the companies’ combined market share in merchant payment services.
To address possible antitrust concerns, the bidders have reportedly considered options, including separating PayPal’s Braintree business or other assets if required by regulators.
Sources said Stripe and Advent remain interested in pursuing the acquisition despite the board’s reservations, although negotiations are expected to continue.
Market observers are also awaiting PayPal’s earnings report scheduled for July 28 for further indications of the company’s financial recovery and future growth prospects.
Concerns over network reliability and its impact on Nigeria’s growing creator economy took centre stage at MTN Nigeria’s Data on Trial event, where content creator and streamer, Jarvis, challenged telecommunications operators to improve connectivity for digital creators.
Speaking during the event, Jarvis asked whether there were locations in Nigeria where uninterrupted internet connectivity could support real-life (IRL) streaming without network disruptions.
“Are there places where there is no breakage when streaming IRL?” she asked.
Her question highlighted the challenges faced by content creators who depend on stable internet services for live streaming, content uploads and real-time engagement with audiences.
Responding, MTN Nigeria’s Chief Technical Officer, Mr Yahaya Ibrahim, said network performance depends on several factors, including location, network coverage, device capability and the number of users connected to a particular base station.
He noted that operators continue to invest in expanding network capacity to meet the growing demand for data services.
Earlier, MTN’s General Manager, Network Performance and Quality Assurance, Mr Michael Ndukwe, explained the evolution of mobile network technology in Nigeria, from first-generation (1G) services to the current fifth-generation (5G) technology.
According to him, each phase of technological advancement has significantly increased network capacity and enabled new digital services.
Ndukwe cited Nigerian Communications Commission (NCC) data showing that Nigerians consumed about 13.2 million terabytes of data in 2025.
He added that data usage reached approximately 4.06 million terabytes in the first quarter of 2026, reflecting the country’s increasing reliance on digital platforms and online services.
According to him, the growth is being driven by wider adoption of 4G and 5G networks, increased smartphone penetration, the proliferation of smart devices and expanding use of social media platforms.
Participants at the event noted that as more Nigerians build businesses and careers around digital content, access to reliable and high-speed internet has become critical to sustaining the country’s digital economy and creator ecosystem.
Dangote Refinery’s Private Placement Reportedly Hits $2.5Bn
FG, UNODC Plan National Strategy against Organized Crime
EFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
CBN to Monitor Every Dollar with FXBT, Forex Tracker
NCC, NDLEA Partner to Fight Piracy and Drug Trafficking
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Tokenization, Blockchain Technology will Transform Financial Institutions – IMF
News2 days agoEFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
News3 days agoFAAN to Replace Physical ID Check with V-Pass Biometric Verification
News3 days agoCBN Introduces Digital Tracker to Monitor BDC Forex Transactions
General News3 days agoNigeria Facing Rising Cybercrime Losses – Report
Telecom3 days agoAirtel Delivers Free Employability Training to Young Nigerians @ World Youth Skills Day
Telecom3 days agontel Plays Down Calls and Data Services, Moves to BET Agenda
News3 days agoCAC Begins Removing 100,000 Companies from Register Over Regulatory Non-Compliance
General News3 days agoTotalEnergies Inaugurates Africa’s Largest Hybrid Renewable Project