Until Google rolls out a fix, you’ll have to be on the lookout for this particularly convincing phishing scam.