Share via

Unusual sign in activity

Anonymous
2022-03-11T17:48:42+00:00

unusual sign in activity has occurred on my account. The msg says to report user but it would be sent to hichamj008@@gmail.com. Is that actually going to Microsoft or is someone trying to get info fom me. I got 2 email msg yesterday from the same IP address in 4 minutes but from different browsers. What should I do

Outlook | Windows | Classic Outlook for Windows | For business

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

4 answers

Sort by: Most helpful
  1. Anonymous
    2022-03-11T18:27:43+00:00

    Hello ZoeyOU

    Hi, I'm Karl and will be happy to help you today.

    While that is a type of message sent by Microsoft, there are many <phishing> scam emails being sent that look very realistic. You cannot go by the <from> address since a spammer can "spoof" this address to make it look like it's coming from wherever they want.

    First thing to do is check the activity on your account for any unexpected log ins. If you don't see any, then the message is nothing more then a phishing scam. No one can change anything on your account without first signing into the account

    https://account.live.com/Activity

    If you do seen any unusual log ins, then check the security info for your account and correct it as required and then change the password to your account immediately

    https://account.microsoft.com/security

    The following is a standard reply I give to those who ask about a sudden increase in <spam> and <unexpected> log in attempts which you may find of interest


    The usual source of a sudden increase in failed login attempts or spam mail received is that the email address was harvested by a hacker who breached a data base on a website where you subscribed to something. That database gets repeatedly sold to other hackers/spammers on the dark web.

    Many people think that hackers penetrate the actual Microsoft servers to gain access to email accounts when that isn't the case. Instead they gain access to an actual account via any number of other ways including phishing emails.

    You can check to see if the email address comes up on a breached database on the following website created/run by Microsoft MVP Troy Hunt.

    https://haveibeenpwned.com/

    Pwned websites

    https://haveibeenpwned.com/PwnedWebsites#Epik

    Other articles that may be of interest

    The 773 Million Record "Collection #1" Data Breach

    https://www.troyhunt.com/the-773-million-record...

    How Do Spammers Get My Email Address?

    https://www.lifewire.com/how-do-spammers-get-my...

    Protect your privacy on the internet

    https://support.microsoft.com/en-us/help/409145...

    *** if you find that the email address was on a breached website where a password was also entered, what you really do want to do is make sure that the same email address/password combination is NOT being used on other sites (i.e. Social Media, Facebook, Paypal, Amazon etc) and if that password is still the one being used on your email account - make sure to change it immediately. Not a question of <IF> a hacker will test those account(s) - just a matter of <WHEN>

    Required Forum Disclaimer: The above links is a non-Microsoft website. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.


    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2022-03-11T17:54:11+00:00

    Also hit with unusual activity . One email from a ******@hotmail.com second one from Russia . Some one opened an account with Wells Fargo today using my info.

    Sign-in details
    Country/region: Russia/Moscow
    IP address: 103.225.77.255
    Date: Thu, 10 Mar 2022 01:52:14 +0000
    Platform: Windows 10
    Browser: Firefox

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2022-03-18T01:57:22+00:00

    I also had two emails today where the Report user button directs to that hichamj mail.

    The sender was no-reply @ microsoft . com (without spaces)

    I checked my login activity and have quite a bunch of unsuccessful ones.

    Sign-in details
    Country/region: Russia/Moscow
    IP address: 103.225.77.255
    Date: Thu, 17 Mar 2022 03:20:42 +0000
    Platform: Apple iPhone 13
    Browser: Maxthon
    A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2022-03-11T19:57:43+00:00

    I appreciate the response. I am aware of this general phishing tactic s . I did change one of my security back up emails today which now is keeping me from checking activities . Normally I would let this brush off as spam, how ever some one opened an account this morning with Wells Fargo. I called about it , and they used my SSN . So some one has my info…. I put a freeze on my credit and put a fraud alert on my self as well.

    This has to be connected .

    We detected something unusual about a recent sign-in to the Microsoft account ******@msn.com.
    Sign-in details
    Country/region: Russia/Moscow
    IP address: 103.225.77.255
    Date: Thu, 10 Mar 2022 01:52:14 +0000
    Platform: Windows 10
    Browser: Firefox
    A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.
    Report The User <br> ---
    To opt out or change where you receive security notifications, click here.

    Was this answer helpful?

    0 comments No comments