Google Sheets API Command and Control Activity

Kaung Khant Ko@kaungkhantko

•updated Sep 8, 2026•0•0•3

Detects network communication with Google Sheets API endpoints that contain specific indicators of C2 behavior, such as suspicious User-Agents, specific spreadsheet cell references, or input options characteristic of automated data exfiltration or command retrieval.