The Carbanak cybercrime gang is using Google services for command-and-control of its malware. Forcepoint Security Labs says the gang uses Apps Script, Sheets, Forms, and Forms to send and receive commands. The gang pilfered some $1 billion in two years from 100 different banks in nearly 30 countries using spear phishing emails targeting bank employees. The use of a legitimate third party service like this one gives the attacker the ability to hide in plain sight, researchers say.”]
Source: https://www.darkreading.com/cloud/carbanak-s-back-and-using-google-services-for-command-and-control