I was minding my own business, didn't change phone, password, or diet. Then on 3 November 2017 a popup asks for my google password. Is this foul play or just bad googly manners? Should I comply, ignore, or panic?
This question may be similar to the one about the en masse Google verification request last February. I thought it might be useful to ask a new question with new verbatim text from the message for search purposes.
I just received this notice on my Samsung S4 Active with Android today, identified by a wrench icon (not shown) in the status bar. It said something about updating my phone number (also not shown).
To continue, first verify it's you
Enter your password
Naturally, an unexpected request for password is cause for concern. When I long-push the home button I see the app identified with a googly logo.
The answer from @LieRyan seems reasonable "...don't sign in on the password prompt on the notification bar. Instead, go to one of the Google Apps or System settings and trigger the login dialog from there." But nothing I've tried has triggered a login dialog. E.g. Inbox works without a new login.
My question is, how can I determine whether this is a phishing request? I assume the logo on the app can be spoofed by some app I don't remember installing.