A seemingly legitimate security notification from a Google account turns out to be part of a sophisticated phishing campaign ...