Back Gbhackers

Google Forms Job Scam Spreads PureHVNC Malware

Gbhackers •Mayura Kathir • March 24, 2026

A newly observed malware campaign is leveraging trusted platforms like Google Forms to distribute the PureHVNC Remote Access Trojan (RAT), marking a shift in how attackers initiate infections. Rather than relying on traditional phishing emails or malicious websites, threat actors are using business-themed lures such as job interviews, project proposals, and financial documents to trick […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PureHVNC Malware Campaign Exploits Google Forms for Job Scams A new malware campaign is utilizing Google Forms to distribute the PureHVNC Remote Access Trojan (RAT). Attackers are employing business-themed lures, such as fake job interviews and financial documents, to deceive victims into downloading the malware. This shift from traditional phishing methods represents a significant evolution in attack strategies. The campaign targets individuals seeking employment or business opportunities, potentially affecting a wide range of users. The use of trusted platforms like Google Forms increases the likelihood of successful infections. As of now, specific numbers of affected users or organizations have not been disclosed. Security professionals are advised to remain vigilant against such tactics. The current status of the campaign is active, with ongoing reports of its spread. 2 sources 49

Extracted Entities

Google Forms Job Scam Spreads PureHVNC Malware

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)