RUSSIAN HACKERS BYPASS GMAIL MFA USING STOLEN APP PASSWORDS

Summary from the TLDR InfoSec newsletter

Russian hackers impersonated U.S. State Department officials to deceive individuals into providing passwords that allowed them to circumvent Gmail's security measures, specifically targeting experts and critics of Russia.