A month or so ago I received an email from myself claiming that one of my passwords has been exposed. Fortunately, that was a dummy password (html123) to a non-secure test site. Plus, My email is Exchange, so i called MS, they confirmed its phishing; I changed my Exchange password to a random one, so th test site, and forgot about it.
Today, I received a similar email, but not from myself and with a more serious passwords (the one for my banking, etc.), a password that I only know. Truthfully, i store all my passwords in an email folder, especially the random ones. Chrome also remembers my passwords.
Both emails are demanding bitcoin. Obviously, I immediately changed my banking password, but has anyone received such an email? What needs to be done - in terms of this email, and moving forward?
For 15+ years, I have been using Avast Internet Security without any issues.