Hackers discover way to access Google accounts without a password

Dupe: https://news.ycombinator.com/item?id=38878931

before reading "is it malware?" after reading "it was malware"