These type of attacks are already known and out of scope for the bounty. Users giving their password on random popups asking for it is not something google can

These type of attacks are already known and out of scope for the bounty. Users giving their password on random popups asking for it is not something google can control.