Interestingly, after I tumbled to the attack, changed the password and closed other open connections, that was when gmail posted a red banner with a warning across the top of my inbox.