My mum's Gmail account was hacked by magic (security.stackexchange.com)

Much better title would be: Phishing and Two-Factor authentication