DanceOn

I received a fraudulent email, supposedly from Evernote, to confirm my email address. They succeeded in getting my password and logging into my account (according to login history). I changed password, added phone 2FA, and logged out of all devices. However, trying to add Google Authenticator 2FA does not work, which has me suspicious something else may still be wrong. As a free user, it appears I cannot create a support case with Evernote. However as this fishing attack likely will affect more users, I would like to report this issue. How can I do that?