Google Forms are being used as a way to obtain the sensitive information of business owners through COVID-19 phishing emails, according to a new report.
The phishing emails in question pretend to be from the U.S. Small Business Administration , which uses the Google Forms platform in order to host phishing pages. The objective of these pages is to steal the personal details of business owners who fill in their information. The phishing forms attempt to appear as a trusted source by duplicating information deriving from past SBA financial support programs, with applicants asked to largely share the same details. Information pertaining to Google account credentials, SSNs, EINs, State ID and driver’s license details, and bank account numbers are all requested by the page.