Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.