As many email users know, phishing attacks (emails that impersonate a trusted source into sharing information) are a pervasive problem. If you use Google (as we do here at TCNJ), you can rest assured that every day, millions (yes millions) of phishing emails are blocked by Google from ever reaching your inbox.
In the spring of 2017, a major phishing campaign tricked some Google users to inadvertently granting access to their contact info, with the intent to spread more phishing emails. Google took action to revoke all access granted to the attacker, as well as steps to reduce and prevent harm from future attacks of this type.
Google has provided some background to help you understand how the campaign worked, how they addressed it, and how you can better protect yourself against attack.