BAZARCALL ATTACKS ABUSE GOOGLE FORMS TO LEGITIMIZE PHISHING EMAILS

Summary from the TLDR InfoSec newsletter

BazarCall is a phishing attack that utilizes an email resembling a payment notification or subscription confirmation that suggests that a user is being billed an outrageously high amount for a product or subscription with a phone number to call for support. The “customer support” team then tricks the user into installing malware onto their device. The newest wave of these attacks utilizes a Google Form to create the invoice with the option to send a copy of the completed form to the entered email which leads to the invoice coming directly from Google.