DO IT https://steemit.com/steem/@ash/steem-how-to-create-store-and-change-a-secure-password

seems like the hacker got more accounts in the hack than steemit thought, and he's milking the last of them as we speak.

I might add that it's borderline for some big accounts to not change their passwords immediately after the hack was known. you guys had it coming.