>So where's the advice to change the passwords?
If you can login with your old password you can be sure hackers, using this exploit, don't know it. If your password doesn't work, it is because you have been hacked and the only solution is a full factory reset...