This attack starts with creating a Google document directly sent to the user via email from this spoofed no-reply@google.com address. Check Point researchers have discovered a new phishing scam campaign that distributes illegitimate URLs by exploiting Google Docs, with the aim of stealing the victim’s cryptocurrency credentials.

Source: HackRead