Yahoo has recommended that users "check their accounts". What exactly would they be checking? Doesn't a compromised account look the same as an uncompromised account from a user perspective?
Potentially, you could have weird locations signing in, emails you didn't send in your sent items. But yeah, seems unlikely that a 'state-sponsored attack' on this scale wouldn't be able to cover their tracks in the eyes of Yahoo Mail users.
