The Google-phish-that-was-also-a-worm – what happened and what to do