Just had the 'Suspicious sign-in prevented' email from Google relating to one of my son's accounts. Now, I know there has been a phishing scam relating to this, but I got the email in both the account in question and my main email account (the backup account linked to the google account (Hotmail)).
Does this mean that the emails are genuine, or that the google account has been more thoroughly compromised than just an attempted log-in?
As an aside, can anyone point me to the direct link to the bit of Google accounts where you change the password? Buggered if I can find it in settings.