Amnesty International published a report on multiple phishing campaigns targeting hundreds of individuals across the Middle East and North Africa. The attacker targets HRDs, journalists, political actors. Amnesty spotted a password change was in fact issued by a Windows computer operated by the attackers, seemingly connecting from an IP address that Google geolocates within the USA. The same with Yahoo account also who configured two-factor authentication using the phone number. Do not open any attachments without proper validation. Use Spam filters & Antispam gateways. Never respond to any spam emails.”]
Source: https://gbhackers.com/phishing-campaigns-google-and-yahoo/