Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign
Russian hackers used Gmail app passwords and fake State Dept. emails to access inboxes of academics.
More info