The comments feature of Google Docs has been used for spear-phishing attacks
In December 2021, a new pattern in phishing attempts developed, with cyber attackers leveraging the Google Docs commenting functionality to send out emails that appeared legitimate. Since many people working or interacting remotely use Google Docs, the majority of the recipients of these emails are familiar with these messages. Because Google is being “misled”…