A threat actor conducted a spear-phishing campaign against more than 1,800 Google accounts, including those of military and government personnel, journalists, and nongovernmental organizations, for the purpose of espionage.