Romulus and Remus and the Wolf in the Story
If you are a user of Chromebook & Android—exclusively—the Gmail exploit (Remus Stealer) is not a threat.
The current news cycle surrounding a "Gmail exploit" is largely sensationalized. Based on the technical facts, if your setup is an updated Chromebook and Android phone, you are outside the threat vector entirely.
Here is the simple breakdown of why you are safe:
The key doesn't fit the lock. The malware in question, Remus Stealer, is aimed specifically at Windows computers. It is a piece of code that cannot run on ChromeOS or Android. They are not the intended targets.
Windows apps have broad access to system memory. Malware can "read" your browser’s stored login tokens.
Chromebook/Android systems use strict sandboxing. Your browser is isolated from the rest of the system. Even if you accidentally downloaded a malicious file, it cannot reach into the browser’s memory to steal your session tokens.
Not an operating system flaw: Google has confirmed there is no vulnerability in Gmail’s servers. The "exploit" does not hack Google; it relies on you accidentally installing malware on your own local device.
Why the media is stoking panic: news outlets like the New York Post scream "Hackers can access your Gmail even after you change your password!" to generate clicks. This is basic trolling. It ignores the crucial context that the malware exploit can only happen to you if you are on a Windows PC that has been infected by malware you downloaded. If this isn't you, move on (nothing to see here).
If you do not use Windows (eliminating the primary attack vector), and you do not use public computers (eliminating the secondary risk), and you keep your devices updated (ensures you have the latest security patches for browser-level bugs), and you filter spam (aware of phishing tactics), then the only way this threat could reach you is if you logged into your Gmail account from a compromised Windows PC (e.g., somebody else’s infected laptop or a workplace/public machine).
Bottom Line: It's not a threat unless you are careless. That said, you can follow the news story out of morbid interest—but without concern. To reiterate; the threat is directed at a specific group of Windows users who download unverified software. If that doesn't include you, it's not a threat to you. Your digital immunity is good.