Russians use Googles own AMP infrastructure to hack Gmail users

[motherboard.vice.com]

Of note here is that, this hack only works because of Googles own accelerated mobile pages technology, which although not its primary purpose, obscures the originating URL.

If you get an email asking you to change a password, especially an unexpected one do not click on it. Instead go directly to the site in question by manually typing the URL in the address bar of your browser.