because they treat smtp.gmail.com as being legitimate traffic. A Google spokesperson provided me with the following statement:" We’re aware of this class of attack and have account hijacking ...