Cybercriminals increasingly using legitimate services such as Google Forms and Telegram to gather user data stolen on phishing websites. Alternative ways to collect data help cybercriminals keep it safe and start using the information immediately, says Group-IB. Phishing kits are a toolset that helps create and operate phishing web pages that mimic a specific company or several at once. In 2020, the brands most often exploited in phishing kits were Microsoft, PayPal, Google, and Yahoo. By stealing user account credentials, hackers gain access to the data of linked bank cards.
Source: https://www.helpnetsecurity.com/2021/04/08/gather-stolen-user-data/