“Wide Impact: Highly Effective Gmail Phishing Technique Being Exploited by Mark Maunder”
This is pretty insidious. You get a message from someome you know. It has an attachment. You try to open it but up pops a Gmail login page asking you to enter your password again for security. That Gmail login page is fake and your password is stolen as soon as you type it in.