A new phishing email is posing as Google to steal users' account credentials, and it's been authenticated by Google itself.