Google researchers point to a resurgence in a decades-old session hijacking tactic, as seen in a recent phishing campaign.