Dropbox team sent an email to my friend inbox, pretending to address to me:
Your Dropbox account password was recently reset.
While we've updated your password, any computers or phones that you previously linked to your Dropbox account are still connected. You can disconnect a lost or stolen device from your account setting.
If you changed your password for security reasons, we strongly recommend that you unlink any devices, web sessions, or apps that look unfamiliar or that you're concerned about. See the help centre article for more information.
If you didn't make this change, please let us know
Thanks!
- The Dropbox Team