Summary
Microsoft Solutions Consultant Sam Mitrovic could have been a victim. He received a notification asking him to approve a Gmail account recovery attempt that he did not initiate. 40 minutes after denying the request, Sam missed a call from Google Sydney.
Scammers were able to do this by using Salesforce CRM. The latter allows a user to set the sender address to any address that the user wants.
Do not agree to approve any attempt to take over your account. If you're not sure if a request is real, call the company and ask for confirmation.
