A W2 tax email scam is circulating in the U.S. using Typeform, a popular software that specializes in online surveys and form building. The campaign is aimed at harvesting victims email account credentials, researchers said. Using Typeform to host the phishing page means that filters won t clock the links as malicious since it s a trusted application. Other phishing attacks have been observed exploiting Box, Google Firebase, Google Forms and Webflow in a similar manner.
Source: https://threatpost.com/tax-phish-google-workspace-email-security/165376/