#GoogleFormsScams

[osintelligence]

https://bit.ly/3FU6dIo - 📧 Spammers are exploiting Google Forms' "Release Scores" feature to deliver scams via email. This method, using Google's own servers, allows these emails to bypass standard anti-spam protections more effectively. Cisco Talos observed a significant increase in such spam messages, highlighting a new technique in cybercrime. #CyberSecurity #SpamTactics #GoogleFormsScams 📊 The spam emails, characterized by the subject line "Score released:", are generated through Google Forms quizzes. Spammers create a quiz, use the victim's email to respond, and then use the "Release Scores" feature to send customized spam messages. This abuse of Google Forms has seen a recent uptick, indicating a shift in spammer strategies. #EmailScams #DigitalThreats #OnlineSecurity 🔗 In a recent example, victims were directed to a second Google Form to "confirm" their email address. This led to a link to an external site, part of an elaborate cryptocurrency scam. The domain for this scam site, go-procoinwhu[.]top, was newly created and saw a surge in DNS queries, indicating the effectiveness of the scam's reach. #CryptocurrencyScams #PhishingAttacks #OnlineFraud 💰 The scam site presented victims with a fake claim of possessing substantial Bitcoin through "automatic cloud Bitcoin mining." The website is designed to appear legitimate, with features like a fake group chat. Victims attempting to claim their Bitcoin are led through a series of deceptive steps, including chatting with a fake agent and filling out forms. #BitcoinScams #WebFraud #InternetScams 💸 The final step of the scam asked victims to pay an "exchange fee" to convert the Bitcoin into USD, revealing the endgame of this elaborate ruse. The Bitcoin wallet address provided by the scammers, however, had no transactions, indicating no victims had paid as of the report date. This case exemplifies the lengths to which cybercriminals will go to conduct scams, reinforcing the adage that if something sounds too good to be true, it probably is.