Security: Microsoft online account hacked

Question

My Microsoft online account was recently hacked. My Microsoft account has 1 device on it; the device is a Surface Pro 4. This Surface Pro 4 has been disconnected from the internet and turned off for the past 6 months. The hack occurred one week ago. My security log shows international access from 10 different countries over the last six days.

The hardware has not been used for the last six months, and my account has not been hacked previously. I use a password at every login, and the remember button is always turned off to force a password to be used. I activated two-step authentication with email and phone. The phone and email were not contacted over the last six months.

Can I block all international access if I do not travel out of country?

How can I protect my online account further?

Thank you for your assistance.

Answer 1

To enhance the security of your Microsoft online account after the hacking incident, consider the following steps:

1. Monitor Account Activity: Regularly check your security log for any unauthorized access. If you see access from unfamiliar locations, report it to Microsoft immediately.
2. Strengthen Security Measures: Ensure that two-step authentication is fully activated. This adds an extra layer of security by requiring a verification code in addition to your password.
3. Change Your Password: Update your password to a strong, unique one that you haven't used before. Avoid using easily guessable information.
4. Secure Your Devices: Since your Surface Pro 4 has been disconnected, ensure that it is secure by running antivirus scans and keeping the operating system updated before reconnecting it to the internet.
5. Consider VPN Usage: While you cannot block international access directly, using a VPN can help you manage and restrict access based on your location.
6. Stay Informed: Be cautious of phishing attempts and suspicious emails that may try to compromise your account further.
7. Contact Microsoft Support: If you continue to face issues or suspect ongoing unauthorized access, reach out to Microsoft Support for assistance in securing your account.

By implementing these measures, you can significantly enhance the security of your online account and protect it from future threats.

---

References:

• I have seen great advice for deleting the idtienphuoc1 Rule but none for stopping it from re-adding itself - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A