Crafted to resemble legitimate security warnings from Google’s help desk, the malicious messages instructed recipients to visit a website where they would be instructed to reenter their Gmail password as a supposed safety precaution.