I published the following diary on isc.sans.edu: “Malicious PowerShell Hosted on script.google.com“:
Google has an incredible portfolio of services. Besides the classic ones, there are less known services and… they could be very useful for attackers too. One of them is Google Apps Script. Google describes it like this:
“Apps Script is a rapid application development platform that makes it fast and easy to create business applications that integrate with G Suite.“
Just a quick introduction to this development platform to give you an idea about the capabilities. If, as the description says, it is used to extend the G Suite, it can of course perform basic actions like… hosting and delivering some (malicious) content… [Read more]
One comment