A spike in recent phishing and business email compromise (BEC) attacks can be traced back to criminals learning how to exploit Google Services. Social distancing has driven entire businesses into the arms of the Google ecosystem looking for a reliable, simple way to digitize the traditional office. Google services are being used by malicious actors to give their spoofing attempts a false veneer of legitimacy, both to security filters and victims. Their target is your password.