This post is a review of a recent account takeover attack. The client contacted me at 9:22 in the morning to notify me that someone had compromised their Google Workspace account. They had become aware of this because they were getting calls and emails from contacts telling them about a suspicious email they had received. …