This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it:

https://www.cloudsek.com/blog/compromising-google-accounts-m...