A W2 tax email scam that uses Typeform, a common programme for online surveys and form development was used as part of its attack flow.
The aim of the email attack was to obtain the victims’ email account login credentials. It has managed to get around Google Workspace’s email encryption.