A convincing phishing scam mimics Google’s security prompts to install malicious web apps that steal 2FA codes, clipboard data, and more.
