Email was breached, suspicious email id found in outlook rules, need help with reporting email id.

Question

Summary of Incident

An unauthorized party accessed my Outlook account. A hidden mail rule was created without my knowledge. The rule automatically forwarded emails containing financial keywords (invoice, payment, deposit, EFT, bank transfer, bank account, etc.) to the external email address: ******@outlook.com

Answer 1

Hi,

Your Outlook account was compromised, and an attacker created a hidden rule to forward emails with financial keywords to ******@outlook.com. This is a common tactic in email account breaches aimed at intercepting sensitive information for fraud.

 

What I suggest is:

Delete the malicious rule.

Change your password and enable Multi-Factor Authentication (MFA).

Review recovery options and scan your device for malware.

Report the suspicious email address and incident to Microsoft via Report Abuse or ******@outlook.com.

 

I hope this helps!