Google responded by saying that it was expected, and added that it was happy the changed forced a shift in attacker behavior.

"This matches the new behavior we have seen. We continue to work with OS and AV vendors to try and more reliably detect these new types of attacks, as well as continuing to iterate on hardening defenses to improve protection against infostealers for our users."