Fraudsters are using Google Forms to target retail, telecom, healthcare, energy and manufacturing companies in an apparent reconnaissance campaign to identify targets for follow-up business email compromise attack. The subjects are unique names of C-level executives from a specific target organization, with no attempt made to use display-name spoofing. The primary goal of an attacker is to elicit a reply from the victim, under the pretext that the survey is broken or not what they expected. As a secondary goal, the form likely serves as a sensor to simply see if anyone fills out their form, functioning as a reconnaissance technique.”]
Source: https://www.cuinfosecurity.com/fraudsters-are-using-google-forms-to-evade-email-filters-a-15833