Attackers Use Multi-Hop Google Redirects for Phishing Campaign… — Cyber Threat Intelligence — TG.ME

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.