{"success":true,"data":{"id":"google-cdn-file-lure","label":"Google CDN file lure — malware via Drive/GCS download link","description":"Email contains a Google Drive direct-download link (docs.google.com/uc?export=download) or a Google Cloud Storage link pointing to a potentially malicious file type. Attackers use Google-hosted URLs because they bypass URL reputation blocklists — the domain is Google, so anti-spam filters trust it. The actual payload (ZIP, EXE, Office macro file) is hosted in Drive or GCS.","tier":"danger","category":"other","isThin":false}}