Constant push notifications in Authenticator

Question

Hi,

since 3 days I get spammed with push notifications in my Authenticator app, that someone tries to log in from the Netherlands…

I changed my password 3 times and have 2 factor authentication active, but I keep getting the notifications…

what can I do to stop the hacker?

Answer 1

Hello,

If someone knows your username/email, they can go to Microsoft to log in and use the forget password to trigger the 2FA ask.

Try this, and see if it eliminates it:

Go to your Microsoft account online https://account.live.com> Sign in > Your info > Sign in preference. Add an alias - You have two options here:

Create new: this will allow you to use the native domain outlook.com to create a new alias.

Add existing: this will allow you to add a 3rd party email address, such as yahoo, gmail, as long as they are not already associated with another Microsoft account.

Once added, make this new alias your primary alias, do NOT delete the old alias. Then at the bottom, click on "Change sign in preference". On the next page, uncheck the box for the old alias. This means, from now one, the old alias cannot be used to sign into your Microsoft account, but it can be still used to receive emails, etc.

Answer 2

To stop the constant push notifications from the Authenticator app, you should take the following steps:

1. Secure Your Account: Since you are receiving notifications about login attempts, it's crucial to ensure that your account is secure. Change your password again, making sure to use a strong, unique password that you haven't used before.
2. Review Security Information: Check your security info in your Microsoft account. If you can sign in, go to Microsoft Account Security and review your phone numbers, emails, and authenticator apps. Remove any unfamiliar devices or apps that may have access to your account.
3. Enable Additional Security Features: Consider enabling features like number matching in the Microsoft Authenticator app to mitigate MFA fatigue attacks. This requires you to confirm the number displayed on your login attempt, adding an extra layer of security.
4. Contact Microsoft Support: If the issue persists, contact Microsoft Support and explain your situation. They can assist you in securing your account and stopping unauthorized access attempts.
5. Monitor for Unauthorized Access: Keep an eye on your account activity and be vigilant for any signs of unauthorized access. If you notice anything suspicious, take immediate action to secure your account.

By following these steps, you should be able to stop the unwanted notifications and secure your account against unauthorized access.

---

References:

• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
• Alert classification for password spray attacks