A themed ISO, a disguised Windows shortcut, and a Google Sheets command channel show how ordinary tools can be stitched into an espionage workflow.
A reported intrusion campaign used Google Sheets tabs as a lightweight control channel, showing how familiar SaaS tools can be bent into malware infrastructure without looking like classic command traffic.