This article from SC Magazine highlights research done by Barracuda showing that from January through April 2020, form-based attacks most often impersonated Google and Microsoft services, and comprised 4 percent of all spear-phishing attacks.
CHATTER