Persistent draft, e mail hacked

Question

I was hacked

They left a draft on my Accounnt

It said my password, e mail, and they stated that they have personal videos of myself

I change the password, I set MFA (it was not active)

I delete the draft, however, It came back over and over

Microsoft do not have a service to talk with an agent

Could you please help me with that, how can I delete this draft permanently

Thank you for you help

Answer 1

Hi, I'm John! I will help you with this.

If you haven't tried anything yet please start by running a full antivirus scan on your computer using Windows Security and any third-party antivirus software you have.

---

To be safe, I recommend the following steps:

Check your account rules and forwarding settings, hackers create rules that automatically forward or delete emails. You can do this in Outlook settings under Mail > Rules and Forwarding. https://support.microsoft.com/office/manage-email-messages-by-using-rules-in-outlook-c24f5dea-9465-4df4-ad17-a50704d66c59

Just to be safe, I’d recommend to sign out everywhere. Visit: https://account.live.com/proofs/manage/additional Scroll down to Sign me out and select "Sign me out".

And changing your password again and enabling two-step verification if you haven’t already. This will add an extra layer of security to prevent future unauthorized access.

If you notice anything unusual in your account settings or purchase history, you might also want to check the Microsoft account security page https://account.microsoft.com/security to review recent activity.

"How to help keep your Microsoft account secure" https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9

---

I really hope this information is helpful! Let me know if you have any further questions or concerns.

Regards,

John J.D.

Answer 2

To address the issue of a persistent draft email that keeps reappearing after being deleted, it is crucial to ensure that the hacker's access to your account is completely removed. Here are some steps you can take:

1. Check for Suspicious Rules: Sign in to your Outlook Web account and navigate to Settings → Mail → Rules. Look for any suspicious rules that may be recreating the draft and delete them.
2. Review Forwarding Settings: Check the Mail → Forwarding section for any unknown forwarding addresses and remove them.
3. Sign Out Everywhere: Go to Microsoft Account Security and use the "Sign out everywhere" option to terminate all active sessions that may still be connected to your account.
4. Manage App Permissions: Visit Manage App Permissions and revoke access to any apps you do not recognize, as hackers often use these to maintain access.
5. Run Antivirus Scans: Ensure that all devices you use to access your email are scanned for malware or viruses, as the hacker may still have access through a compromised device.
6. Reset Password Again: After completing the above steps, reset your password again to ensure that any potential backdoor access is closed.
7. Enable Multi-Factor Authentication (MFA): Since you mentioned that MFA was not active, ensure it is enabled to add an additional layer of security to your account.
8. Monitor Account Activity: Keep an eye on your account for any suspicious activity and inform your contacts about the potential compromise to prevent them from falling victim to phishing attempts.

If the issue persists after following these steps, consider reaching out to Microsoft Support through their official channels for further assistance.

---

References:

• Hacker set up continuous draft ransomware email - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A