Google takes action after coder reports 'most sophisticated attack I've ever seen'

The article describes a sophisticated voice‑phishing campaign that abused unverified Google Workspace g.co subdomains and Google Forms to send authentic-looking password reset emails, enabling attackers to socially engineer victims into account takeovers; it recounts Zach Latta's near-compromise and similar cases reported by Brian Krebs, notes Google has suspended the abusing accounts and is hardening defenses, and reminds users that Google will not call to reset passwords.