If you think you've been a victim of a spear-phishing attack, you should immediately change the passwords for all of your accounts. You should monitor the activity closely and log out of all devices in case someone else is logged in.