GRIDTIDE Google Sheets API C2 Style Calls From Non Browser Process

Daniel Jeremiah@daniyyell

•updated Feb 28, 2026•0•27

Detects processes that access Google Sheets API endpoints and parameters described in GRIDTIDE reporting, where the initiating process is not a common web browser. This may indicate abuse of Sheets as a C2 channel.