A reported intrusion campaign used Google Sheets tabs as a lightweight control channel, showing how familiar SaaS tools can be bent into malware infrastructure without looking like classic command traffic.