[SoftTalker]

Or a phisher could buy the ad slot or game the search results to publish a fake login page to phish credentials. This is why 2FA is not really optional anymore for anything of value.