Threat actors have been seen abusing Google Apps Script to launch convincing phishing attacks and steal people’s Microsoft 365 login details.

With it, Google says developers can add custom menus, dialogs, and sidebars to Google Docs, Sheets, and Forms; write custom functions and macros for Google Sheets, publish web apps, either ...

As the platform allows anyone with an account to publish a script as a public web app, giving it a Google domain, the threat actors can easily share it with the victims via a phishing email that ...

The script editor is available in a public preview build of the Google Home app or on the web, along with a variety of sample scripted automations. Google has provided a step-by-step guide as well.