Researchers at cybersecurity firm Proofpoint have discovered a new way of exploiting Google App Scripts and thus deliver malware via URLs. Researchers identified a vulnerability that allowed attackers to leverage Google Apps Script to. automatically download arbitrary malware hosted in Google Drive to a victims computer. Researchers feel that cyber criminals would attempt to exploit these new opportunities more often as there are very few defensive tools that protect organizations/individuals against such kinds of threats. The attack can be prevented by adopting the same defensive measures that are used to prevent email-based phishing attacks.”]
Source: https://hackercombat.com/google-apps-script-vulnerability-gives-opportunities-to-hackers/