I'm guessing they're leaving out the "sophisticated" details of the compromise. Using encryption to hide your malware from virus scanners and using some computer "social engineering" (ssl connection) is not very sophisticated.  I don't understand why it needs to be sophisticated ? because it's google ?  It's known that some of the largest viruses have spread to government comuputers (sobig).