It turns out that halfway clever phishing attacks really, really work

I leave gmail open continuously in a browser tab while I’m working. Every once in a while (days apart) it logs itself out, and goes back to the login display. That behavior is sucker bait for credential stealing. So yeah, I like the two factor check a lot.

2 Likes