Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain. The attack typically begins when a victim downloads a business-themed ZIP ...

Threat researchers at Symantec and Carbon Black said the activity ran from November 2025 to mid-February, with evidence that ...