Telecom
Sophos Uncovers Top 7 Ways Cyberscammers, Malware Operators Abuse Google Forms
Sophos, a global leader in next-generation cybersecurity, has published research, “Phishing and Malware Actors Abuse Google Forms for Credentials, Data Exfiltration,” describing how cyberattackers – from entry-level scammers to advanced adversaries – abuse Google Forms to implement a wide range of attacks, targeting both organizations and individuals.
Sean Gallagher, senior threat researcher at Sophos, “The extent to which cyberattackers abuse Google Forms came to light while we were researching how malware abuses encryption to conceal its activities and communications.
“Google Forms offer cyberattackers an attractive proposition: the forms are easy to implement and trusted by both organizations and consumers; the traffic to and from the service is secured with Transport Layer Security (TLS) encryption so it can’t be easily inspected by defenders; and the whole set up essentially provides a free attack infrastructure.
“Our analysis shows that while most abuse of Google Forms by cyberattackers remains firmly in the low-skill phishing and fraud spam space, there are increasing signs that adversaries are taking advantage of the platform for more sophisticated attacks.
“Sophos’ examples of this include attackers using Google Forms to exfiltrate data and for malware command-and-control.”
Below are the seven ways that Sophos researchers have identified cyberscammers and malware operators abusing Google Forms:
Phishing: Despite the fact that Google warns users on every page of a form not to enter password details, Sophos found several examples where attackers tried to convince potential victims to enter their credentials into a Google Form laid out to resemble a login page. These forms were often tied to malicious spam campaigns.
Malicious spam campaigns: One of the largest sources of Google Forms links in spam were “unsubscribe” links in scam-related marketing emails. Sophos has intercepted a number of spam-based phising campaigns that targeted Microsoft online accounts, including Office365. The spam claimed that recipients’ email accounts were about to be shut down if they were not immediately verified, and offered a link to a Google Form that asked the user to enter their Microsoft credentials. These Google Forms pages were decorated with Microsoft graphics but, still, clearly a Google Form.
Payment card data theft: Entry-level scammers use Google Forms’ ready-made design templates to attempt to steal payment data through faked “secure” e-commerce pages.
Potentially Unwanted Applications (PUAs), such as adware: The researchers discovered a number of PUAs targeting Windows users. These apps use Google Forms pages surreptitiously, with the web requests collected and submitted to forms automatically without any need for user interaction.
Fake user interfaces for malicious Android apps: Sophos found some malicious Android applications that made use of Google Forms to capture data without having to code a back-end website. Most of these were adware or PUAs. For instance, the researchers found “SnapTube,” a video app that generates revenue for the developer through web advertising fraud and which includes a Google Forms page for user feedback.
Data removal: The researchers uncovered a number of more sophisticated threats abusing Google Forms. This included malicious Windows applications that used web requests to Google Forms pages to ‘push’ stolen data from computers to a Google spreadheet via Google Forms.
Part of the wider malicious cyberattack infrastructure: Sophos telemetry has detected a number of PowerShell scripts interacting with Google Forms. We were able to prototype how PowerShell scripts could be used to scrape Windows profiling data from a computer and submit it to a Google Forms form automatically.
“Google frequently shuts down accounts associated with a mass abuse of applications, including Google Forms,” said Gallagher. “However, the kind of low-volume, targeted use of Forms by some malware could stay under the radar. Business defenders need to be alert to this threat and apply caution whenever they see links to Google Forms, or any other legitimate services trying to obtain credentials, and they should not inherently trust TLS traffic to ‘known good’ domains such as docs.google.com.”
Sophos products, including Intercept X for endpoints, defend against most malicious spam that carry forms-based phishing campaigns and detect the behaviors of system information collection discussed in the new research.
Sophos also advises consumers to install a security solution, such as Sophos Home, on the devices that they and their families use for online communications and gaming to protect everyone from malware and cyberthreats.
Association of Telecommunications Companies of Nigeria (ATCON), has raised the alarm over a diesel supply crisis caused by an ongoing strike by the National Union of Petroleum and Natural Gas Workers (NUPENG).
Mr Tony Emoekpere, president, ATCON in a statement said that the fuel supply disruption is critically affecting telecom base stations, pushing them to the brink of a shutdown and threatening millions of mobile and internet users in the region.
“This strike, which stems from the persistent harassment of tanker and petroleum product drivers by police officers in Lagos State, has effectively halted all truck loading operations and fuel movements,” Emoekpere stated.
He explained that diesel supply to telecom infrastructure has been severely impacted, leaving critical sites with dangerously low fuel levels.
According to him, if urgent measures are not taken, the situation could escalate into a full-blown network blackout, disrupting essential services, including mobile and internet access, business operations, emergency response systems, and daily communications.
ATCON has called on the governors of Lagos and Ogun states to intervene immediately by facilitating the release of diesel from depots to telecom operators to prevent further deterioration of the situation.
“This is not just a telecom issue—it is a national emergency that could cripple economic activities and compromise public safety,” Emoekpere stressed.
The association also appealed to security agencies and petroleum unions to resolve the crisis swiftly to safeguard Nigeria’s connectivity and economic stability.
ATCON emphasised that a prolonged disruption in fuel supply to telecom infrastructure could have far-reaching consequences for both businesses and individuals who rely on stable communication networks for daily operations.
In 2023, Nigerians spent a total of about ₦5.3 trillion on telecommunications services, which includes calls, data, SMS, and other telecom services, according to the Leadership.
Specifically for voice calls, Nigerians made approximately 408.5 billion minutes of local calls, generating around ₦3.28 trillion from outgoing calls and ₦3.23 trillion from incoming calls, totaling about ₦6.51 trillion in call-related revenue according to projections based on 2023 call volumes and tariff data.
However, the ₦5.3 trillion figure represents the overall telecom sector revenue, with voice calls being a major component but also including data and other services.
For individual spending, MTN subscribers spent an average of ₦2,508 monthly on voice calls in 2023, showing a 14.4% increase from 2022, while Airtel customers spent about ₦1,694 monthly on voice calls.
Total telecom spending (calls, data, SMS, etc.): ₦5.3 trillion in 2023
Estimated revenue from voice calls alone: around ₦6.5 trillion based on call minutes and tariffs
Average monthly spending on calls per subscriber: ₦1,694 to ₦2,508 depending on the network
Nigeria’s corporate elite gathered recently to bid farewell to one of the nation’s most influential business titans, Dr. Pascal Gabriel Dozie.
The Nigerian Exchange Group’s headquarters in Marina, Lagos, played host to an ‘Afternoon of Tributes’ that saw industry captains, financial moguls, and family members celebrate the extraordinary legacy of a man who helped reshape Nigeria’s economic landscape.
MTN Nigeria Chairman, Dr. Ernest Ndukwe, captured the mood of the gathering when he described the late Dozie as “a visionary leader, a true patriot, and a trailblazer” whose impact continues to reverberate across Nigeria’s business terrain.
“Thanks to his remarkable foresight and unwavering dedication, MTN Nigeria didn’t just find its footing—it soared,” Ndukwe told the distinguished audience.
“Today, it stands not only as the largest telecommunications company in the country but also as one of the most highly valued corporations on the NGX Premium Board.”
The symbolic bell-ringing ceremony—a highlight of the event—paid homage to Dozie’s pivotal role in transforming both Nigeria’s capital market and telecommunications sector.
Speaker after speaker painted the portrait of a man whose influence transcended conventional boundaries. Beyond founding Diamond Bank and steering MTN Nigeria to unprecedented heights, Dozie was celebrated for embodying the rare combination of business acumen and ethical leadership.
Throughout the afternoon, the late business icon was remembered not merely as a successful entrepreneur but as a nation-builder whose contributions spanned critical sectors from banking and telecoms to public policy and education.
More than his corporate achievements, however, it was Dozie’s personal qualities that dominated tributes—his uncompromising integrity, innovative thinking, disarming humility, and lifelong commitment to service.
As the event concluded, it became clear that the gathering was more than a memorial—it was a celebration of possibilities, a testament to what can be achieved when purpose meets passion and when leadership is firmly rooted in service to others.
Telcos Warn of Nationwide Telecom Blackout over Diesel Shortage
Nigerians Spend N5.3 Trillion on Telecom Services
Canal+ Buyout Of South Africa’s MultiChoice one Step Closer
CBN, SEC Fine Access Holdings N1.21Bn for Infractions
Nigerians, Others Lost $70m to Denied Visas Applications to Europe in 2024
E-Financial3 days agoAccess Bank Faces Charges over Alleged Diversion of N826m
E-Financial3 days agoFidelity Bank Seeks Supreme Court Judgement Interpretation, Condemns Malicious Publication
Telecom3 days agoMart Networks Rolls Out Tailored Cybersecurity Solution for Fintechs
E-Financial3 days agoDon’t Panic, Banking Sector is Safe and Sound- CBN
News3 days agoNigeria’s Digital Economy Sector Attracts $191m FDI
E-Financial3 days agoCourt to Hear NIBSS Suit Seeking Exclusive Power to Manage BVN Database
General News3 days agoNigeria to Launch 4 Satellites for Surveillance, Others
General News3 days agoShell Reports 122 Percent Surge in Oil Spills from Nigerian Operations in 2024