Browser extension repeatedly refetches payload from Google Sheets gviz API

Ankit Mehta@Secvyn

•updated 29 days ago•0•0•0

Detects repeated, non-interactive requests to the Google Sheets Visualization API (gviz/tq) originating from common web browsers. This pattern is indicative of a malicious browser extension attempting to reconstruct or reinject payloads when a user visits specific targeted websites.