Warning Phishing via Dropox

[pedruid]

I received an email form an overseas friend with the following
Click on REVIEW to download the files I attached through Dropbox drive. login to gain access to the files. If you click on review it asks you to login in to your email account which in my case is Gmail. Turns out my friend who is with British Telecom had been hacked and hadnt sent it to me. I changed my password immediately when I realized what I'd done and sent out a message to my contacts warning them.
I feel like such a Dimwit.

Has anyone else been hit by this?