Malware is a dropper for an information stealer that sends data to a database server controlled by the attacker. Researchers at Netskope on April 12 reported the associated Google sites that host the malware. The malware is an executable disguised as a PDF file that holds guest house reservation information, and it is stored in the File Cabinet storage space for Google Sites. Researchers believe that the malware of the same kind has been around since early 2014. It was detected by 47 of the 66 antivirus engines listed on the platform.
Source: https://www.bleepingcomputer.com/news/security/malware-hosted-in-google-sites-sends-data-to-mysql-server/

