Monday, May 5, 2025
HomeCyber Security NewsHackers Abuse Google Forms to Bypass Anti-spam Filters

Hackers Abuse Google Forms to Bypass Anti-spam Filters

Published on

SIEM as a Service

Follow Us on Google News

Cybersecurity researchers at Talos have discovered that spammers are taking advantage of Google Forms quizzes to disseminate various types of online scams to unsuspecting victims.

Since Google’s servers are where the emails are coming from, it could be simpler for them to get past anti-spam filters and reach the recipient’s mailbox.

The spammers create new quiz forms and then abuse the “Release Scores” in the form to deliver their spam to the victim.

- Advertisement - Google News

For instance, When constructing a new form in Google Forms, a creator has the option to “Make this a quiz.” The quiz’s decision to distribute grades “Later, after manual review” requires that email addresses be included.

The setting, choosing “responder input” allows the spammer to fill in the victim’s email.

Google forms
Google forms

You may add any text or URL to the message that is sent as part of the email, and Google will deliver it using the Google account that produced the quiz’s “From:” address, reads the report.

Document
Protect Your Storage With SafeGuard

Is Your Storage & Backup Systems Fully Protected? – Watch 40-second Tour of SafeGuard

StorageGuard scans, detects, and fixes security misconfigurations and vulnerabilities across hundreds of storage and backup devices.

The email messages created using this method have a high probability of reaching the victim’s inbox since they are generated from Google’s servers. 

The spam also affected the cryptocurrency by using Google Forms; a recent example is given below:

An example of a recent scam by Google form
An example of a recent scam by Google form

When the user clicks the ‘view’ button, it redirects to the fake website of spammers and wants to fill in the user email ID.

Accordingly, it redirects to the external link of a fake website for the DNS query. Upon accessing dudicyqehama[.]top, the user is presented with a sophisticated fraudulent website claiming to have over 1.3 Bitcoin in their account due to “automatic cloud Bitcoin mining,” with an estimated value of over $46,000. 

By clicking ‘continue’, it defaults to the sign-in pages, username and password are prefilled into the form.

When the victim attempts to claim their Bitcoin from the main site, they are redirected to what looks like a live chat with an agent named “Sophia.”

Want to fill out the form to transfer the money by filling in the bank details? The victim is instructed that to claim almost $48,000, the victim must pay an “exchange fee” of 0.25%, or $64.

To exchange, they want to fill out the last form by entering their name, email, and phone number. The spammer sends the BTC QR code to scam the victim.

Fortunately, none of them are not attacked in this scam.

Patch Manager Plus, the one-stop solution for automated updates of over 850 third-party applications: Try Free Trial.

Latest articles

Claude AI Abused in Influence-as-a-Service Operations and Campaigns

Claude AI, developed by Anthropic, has been exploited by malicious actors in a range...

Threat Actors Attacking U.S. Citizens Via Social Engineering Attack

As Tax Day on April 15 approaches, a alarming cybersecurity threat has emerged targeting...

TerraStealer Strikes: Browser Credential & Sensitive‑Data Heists on the Rise

Insikt Group has uncovered two new malware families, TerraStealerV2 and TerraLogger, attributed to the...

MintsLoader Malware Uses Sandbox and Virtual Machine Evasion Techniques

MintsLoader, a malicious loader first observed in 2024, has emerged as a formidable tool...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Claude AI Abused in Influence-as-a-Service Operations and Campaigns

Claude AI, developed by Anthropic, has been exploited by malicious actors in a range...

Threat Actors Attacking U.S. Citizens Via Social Engineering Attack

As Tax Day on April 15 approaches, a alarming cybersecurity threat has emerged targeting...

TerraStealer Strikes: Browser Credential & Sensitive‑Data Heists on the Rise

Insikt Group has uncovered two new malware families, TerraStealerV2 and TerraLogger, attributed to the...