Google Apps Script

I'm using AI to do things that can be done with a script.

So for example, I've built an Apps Script into a Google Sheet that pulled from a different API.

Like, I've built it.

I now know how they work.

It has everything to do with being aware of the kind of work that you are doing repeatedly and what is the best solution for it.

That, for me, was one of the biggest learnings in going through this requirements gathering process, which is why we always stress do the requirements before you start building anything.

And so, you know, so Chris, I'm aware of, you know, the Apps Script and the VBA scripts in Excel, but what are some of the other examples of scripts that people who aren't overly technical can build and aren't using?

If you're doing this on your computer, which presumably a lot of people are-

And that design philosophy runs deep.

If you want to get the original images out of a Google Doc programmatically, you're looking at scraping the document or using Google Apps Script to extract them, both of which are brittle, neither of which preserves metadata reliably.

The image was never meant to leave.

Which brings us

That's amazing.

So this site that he set up for kind of our listeners includes guided wizard installers designed to help educators and school administrators create custom Google Apps Script web applications without any programming experience.

The platform aims to demystify the creation, authorization, and deployment process while maintaining Google workspace integration.

and adhering to student data privacy standards.

Once you get up to speed, there's a learning curve to, you know, there's a lot of different tools as well.

You know, you've got to learn about AppSheet, Appscript, you know, there's anti-gravity, there's Google's, Google changes the names constantly and stops products.

That's definitely a downside of Google.

They're famous.

Use VMs with snapshots, rotate credentials, and reinstall the OS if you think you've been hit.

Also in the wild, a fake crypto conference targeting security researchers around Black Hat and Defcon, a hacker posing as a crypto news site organizer, used a legitimate Google Doc with an Apps Script sidebar that appeared encrypted.

Targets were tricked into entering a decryption key that triggered malware installation, including a Mac OS info stealer, a Windows remote desktop tool, and a fake Ledger wallet installer.

And finally, the Data Broker Clarity Check left a database of over 9 million image files publicly accessible without authentication.

Researchers at Huntress uncovered a social engineering campaign targeting Black Hat and DEF CON attendees, with attackers impersonating a CoinDesk executive on X to lure victims into opening a malicious Google Doc.

The document uses Google Apps Script to collect reconnaissance data, including IP addresses, operating system, location, and installed cryptocurrency wallets, before presenting fake errors that prompt users to download malware or run terminal commands.

macOS victims receive malware resembling Atomic macOS Stealer, while Windows users are targeted with payloads linked to credential theft, remote access, and persistent backdoors.

A secondary lure uses a fake Dropbox DocSend site to distribute additional malware, including NetSupport RAT.

And that gem is a build advisor, and the build advisor says what are all the surfaces that you can build safely and securely, uh, within Logitech.

So whether that be a Workspace Studio flow, whether that be an Apps Script, whether that be something, an actual agent in Gemini Enterprise, whether that be something you can do in LogiQ.

But one of the parts of the knowledge of the gem goes back to the project intake and outtake form such that, Jeremy, if you're starting something that's net new to you, what might be new to you may not be new to Heinrich And so now I'm already giving you a head start because now another citizen, a Heinrich, can come to...

Or you can say, oh, you know what? Or the gem will say, "Hey, Heinrich, sounds like the project that you're thinking about," right? So that it does an interview, first principles interview, help me understand what you're trying to build, what you're trying to accomplish, what are your goals, objectives, et cetera.

Six, a ransomware affiliate used Anthropix cloud code to breach exposed VPNs, steal LDAP passwords, backdoor those VPNs, and exfiltrate SQL databases across six organizations.

prioritize vpn appliance patching and mfa and hunt for ldap credentials access and config changes that you didn't make seven zscalers tracking c2 looper a new rust backdoor delivered through a multi-stage click fix chain that uses github for command and control hunt for those click fix lures and github based c2 traffic and block those published indicators eight Iranian state-linked operators have evolved the cavern framework to use DNS A record responses to switch between direct HTTPS and a rotating Google Apps script relay.

Inspect DNS responses that steer traffic and any Google Apps script relay activity and block the indicators included in the write-up.

9.

Storm 0501 has moved past encrypting endpoints to hijacking whole Azure tenants.