I have a phishing question. Yesterday Waif's email account got hacked when she opened a google doc from a trusted source. The subject line was "vital information". Google alerted us today that there was an unauthorized login in Indianapolis. We changed her password. Other than 2 step verification, is there anything else we should be doing?
