However, Google has acknowledged the phishing campaign and confirmed that it exploited OAuth and DKIM mechanisms in a novel ...