Amazing; I hadn't seen that story. Vox doesn't prove that this particular phishing attack was the way the attackers got access to Podesta's email, but what an unbelievable failure by their IT team. Who would fall for this?

The phishing email claims to be from from Google support, and tells the user:

> CHANGE PASSWORD: <https://bit.ly/[deleted]>

That should be enough red flags. Also, the bitly address expands to one in the domain, myaccount.google.com-securitysettingpage.tk