A way to mitigate the attack is to use Google's Password Alert extension in Chrome [1]. If you enter your Google password on a non-Google domain, it immediately

A way to mitigate the attack is to use Google's Password Alert extension in Chrome [1]. If you enter your Google password on a non-Google domain, it immediately tells you that you've been phished and prompts you to change your password. I use this extension in conjunction with two-factor auth. 1. https://chrome.google.com/webstore/detail/password-alert/noondiphcddnnabmjcihcjfbhfklnnep https://chrome.google.com/webstore/detail/password-alert/noo...