The last step of the attack the FBI described on September 1 is a permission prompt drawn by a legitimate cloud provider, and approving it gives a stranger lasting access to a victim’s email and files ...