Now I'm afraid of every message I received the last days.   

How can we prevent such pishing-attempts?

What can we do in case someone has already stolen our password?

Is it sufficient to change our password?
Any recommendation?