Google Apps Script is a JavaScript-based language used for the creation of add-ons and extensions for applications in the Google ecosystem, including Docs, Sheets, Slides, and Forms.

Threat actors have been seen abusing Google Apps Script to launch convincing phishing attacks and steal people’s Microsoft 365 login details.

A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware.