Hacker synced to my email !?

Question

Yesterday I received an email from Microsoft saying someone in Korea accessed to my email, I immediately went to check the recent activity to find out that they successfully did and automatic sync with Protocol: IMAP at 1:29 AM , I changed my password and activated the 2 step verification, went to sleep and later this same day I received probably 100 phishing emails, just png images offering to clic the link and win something I reported and blocked every single one, those email stopped today just 4 hrs ago, no more phishing emails, but after that they still try to access my account and I received two email so far from microsoft saying:

Unusual sign.in activity

We detected something unusual about a recent sign-in to the Microsoft account XXXXXXXXXXXXX

Sign-in details

Country/region: Russia/Moscow

IP address: XXXXXXXX

Date: Tue, 11 Apr 2023 07:29:48 +0000

Platform: Windows 10

Browser: Firefox

A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.

Report The User

TWICE AND THEY DONT SHOW ON THE RECENT ACTIVITY, I REPLIED TO THOSE EMAIL BY THE "REPORT USER" OPTION BUT AS I STATED BEFORE THEY DONT SHOW IN THE RECENT ACTIVITY RECORD.

to continue and add more information when I first checked the recent activity log after the first email I received about the succesful sync I noticed that these hacker was trying to get in for ONE MONTH already, and all the notification microsoft send me were in the junk email folder, WHY THATS? WHY IF IS THIS IMPORTANT

1.- WHY THE FIRST 200 ATTEMPT NOTIFICATIONS TO LOG INTO MY ACCOUNT WENT DIRECTLY TO MY JUNK EMAIL???

2.-WHY THE RECENT SIGN INS FROM RUSSIA DONT SHOW ON MY RECENT ACTIVITY LOG?

3.- SINCE THE SYNCED TO EMAIL, DO THEY HAVE A COPY OF ALL MY EMAILS?

4.-THEY CAN STILL READ MY EMAIL?

5.- THEY CAN STILL LOG IN INTO MY EMAIL?

6.- ARE THEY PERMANENTLY LOGGED IN?

7.- IN CASE THAT THE PHSING EMAILS START COMING AGAIN, WHAT SHOULD I DO TO STOP THEM?

8.-WHAT ARE YOUR RECOMMENDATIONS NOW?

PLEASE help, I would appreciate that, thank you.

Answer 1

Thank you for your reply, as general recommendations this answer is ok, but doesn't help to solve the problem or answer my other questions, so now Im receiving hundreds of spam phishing emails and Microsoft doesn't help at all.

Answer 2

Do you have reading problems? My issue is not exactly similar to this OP. What I seek is Microsoft's official assistance, not non-professional volunteers who lack the ability to diagnostic the problem. As I emphasized at the beginning of my original post, what I need is the assistance from the Microsoft Outlook technical team.

You are abusing the power of moderator, misinterpreting my question and giving me unhelpful answer.

It seems that you don't understand the purpose of the sign-in activity, and your mind has been stuck there. How can we trust the sign-in records to be valid if it doesn't truly reflect all logins? How do you ensure that no hacker log into your account if they bypass the sign-in log?

The purpose of my question is to seek an official answer from Outlook team, to confirm the mechanism and potential bug of their system, whether the sign-in log can be avoided through the security code login, or the record can be modified/erased by other.

Answer 3

I have similar issues, my hotmail keeps getting harassed by unknown persons. They attempt to login to my email from various IP, sometime use SYNC methods. I rely on checking the recent sign-in activity history to ensure my email account is safe. But recently found that, the sign-in records are not accurate, It doesn't log all of the sign-in activity, especially when other uses the security code to access your email, you won't aware, it doesn't show on the recent sign-in activity log. Already complained to microsoft support agents multiple times, but they refused to help.

Answer 4

Thank you for your reply, as general recommendations this answer is ok, but doesn't help to solve the problem or answer my other questions, so now Im receiving hundreds of spam phishing emails and Microsoft doesn't help at all.

In this thread you were advised to unsubscribe from Spam/phishing emails. Don't do this. You won't be unsubscribed. You are telling the sender that this is an active address. You will receive more spam/phishing messages.

If all of these spam/phishing messages are being sent to Junk, you can't do anything except delete them. If they're in the Inbox, mark them as junk and outlook will eventually recognize them as junk.

Don

Answer 5

I have similar issues, my hotmail keeps getting harassed by unknown persons. They attempt to login to my email from various IP, sometime use SYNC methods. I rely on checking the recent sign-in activity history to ensure my email account is safe. But recently found that, the sign-in records are not accurate, It doesn't log all of the sign-in activity, especially when other uses the security code to access your email, you won't aware, it doesn't show on the recent sign-in activity log. Already complained to microsoft support agents multiple times, but they refused to help.

---

sin30,

1. I've deleted your English language post in the Chinese forum.
2. Regarding:

Recently, I found that every time I open the hotmail page to log in, the system will send a login verification code directly to my backup email, even though I didn't ask for it. In the past, under normal circumstances, unless I chose a security code to log in, for else the default page was to wait me enter a password.

Sounds like you've setup two step verification. At some point during this process, you should see the option to "trust this device" or "make this a trusted device" or similar. You should check that.

Or you can turn off two step verification and make sure that you've chosen a strong password.

* https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4  * https://www.security.org/how-secure-is-my-password/

Re:

The second problem is that I found that logging in to the email through the verification code does not leave a record in the recent login history.

I'm not sure that your activity will show every successful login by you. You should only be concerned about successful logins by someone other than you.

And... you should check login activity but don't worry too much about unsuccessful login attempts. They're a fact of life.

Don