New Gmail Attack Bypasses Passwords and 2FA to Read All Email

The “bypass” is that it’s malware on the user endpoint, so it just lurks the data using the user’s existing session. So it’s not a flaw with Gmail or limited to that platform.