emails going out on outlook that I didn't send

Question

Emails are going out from my outlook account daily that I didn't send. My account was hacked into over the weekend but I fixed it (changed my password, set up microsoft authenicator). I suspect these are automated emails set up while the hacker still had access to my account. I don't know how to make it stop.

Answer 1

Try to remove anything the hacker set up. Sign in to Outlook on the web, go to Settings, Mail, Rules and delete any rule you did not create. Then check Mail, Forwarding and make sure no forwarding address is listed. Also review Automatic replies and your account activity at account.microsoft.com/security to confirm no unknown access.

If emails still send after this, let me know if you see any unfamiliar sign in activity.

Answer 2

To stop the unauthorized emails being sent from your Outlook account, you should take the following steps:

1. Check for Suspicious Rules: Sign in to Outlook on the web and go to Settings → Mail → Rules. Look for any rules that you did not create, especially those that may be forwarding emails or sending automated messages.
2. Review Forwarding Settings: In the same settings area, check Mail → Forwarding for any unknown forwarding addresses that may have been set up by the hacker.
3. Sign Out Everywhere: Go to Microsoft Account Security and use the option to sign out of all active sessions. This will help ensure that any sessions the hacker may have opened are closed.
4. Manage App Permissions: Visit the Manage App Permissions section and revoke access to any apps that you do not recognize, as these could be used by the hacker to maintain access to your account.
5. Run PowerShell Commands: If you have Microsoft 365 admin access, you can use PowerShell commands like Get-InboxRule -Mailbox youraddress@example.com to find and remove any hidden rules that may be sending emails.
6. Reset Your Password Again: After performing these steps, reset your password to a strong, unique one and ensure that multi-factor authentication (MFA) is enabled.
7. Monitor Account Activity: Keep an eye on your account for any further suspicious activity and check the sign-in logs for any unauthorized access.

These steps should help you regain control over your account and stop the unauthorized emails from being sent out.

---

References:

• Context My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• Context Respond to a compromised cloud email account