A threat actor has been sending thousands of emails to organizations, in what researchers warn is a reconnaissance campaign to identify targets for a possible follow-up business-email-compromise (BEC) attack. The campaign leverages Google s Forms survey tool, which is not new and is routinely observed in credential phishing campaigns to bypass email security filters. The use of Google Forms may also prompt an ongoing dialogue between the victim and the attacker setting them up as a victim for a future BEC trap.
Source: https://threatpost.com/google-forms-set-baseline-for-widespread-bec-attacks/163223/