Original emails are having the content changed

Question

Hi,

I have genuine emails being received and even old emails are having the content changed to the below. I have changed my password, MFA and removed the rules which were set up by the hacker. But unable to change the content of the emails back. Any advice please.

What happened here?

About a few months ago, I gained access to your devices and started tracking your online activity. I was able to hack into your computer and access your email:

Thanks

Matthew

Answer 1

Hi, I'm John! I will help you with this.

Is it possible that your account has been hacked? If you haven't tried anything yet please start by running a full antivirus scan on your computer using Windows Security and any third-party antivirus software you have.

---

To be safe, I recommend the following steps:

Check your account rules and forwarding settings, hackers create rules that automatically forward or delete emails. You can do this in Outlook settings under Mail > Rules and Forwarding. https://support.microsoft.com/office/manage-email-messages-by-using-rules-in-outlook-c24f5dea-9465-4df4-ad17-a50704d66c59

Just to be safe, I’d recommend to sign out everywhere. Visit: https://account.live.com/proofs/manage/additional Scroll down to Sign me out and select "Sign me out".

And changing your password again and enabling two-step verification if you haven’t already. This will add an extra layer of security to prevent future unauthorized access.

If you notice anything unusual in your account settings or purchase history, you might also want to check the Microsoft account security page https://account.microsoft.com/security to review recent activity.

"How to help keep your Microsoft account secure" https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9

---

I really hope this information is helpful! Let me know if you have any further questions or concerns.

Regards,

John J.D.

Answer 2

It sounds like your email account has been compromised, and the hacker may have manipulated your email content. Here are some steps you can take to address the issue:

1. Secure Your Account: Since you've already changed your password and enabled multi-factor authentication (MFA), ensure that all recovery options are up to date. This includes checking for any unauthorized devices or applications linked to your account.
2. Check for Forwarding Rules: You mentioned removing rules set up by the hacker. Double-check that there are no remaining rules that could be forwarding or altering your emails.
3. Review Account Activity: If you regain access to your account, look for any suspicious activity, such as changes to your settings or unauthorized access attempts. This can help you identify any further actions needed to secure your account.
4. Contact Support: If the problem persists, consider reaching out to Microsoft Support for assistance. They may have additional tools to help you recover your account and address any ongoing issues.
5. Inform Contacts: Notify your contacts about the compromise to prevent them from falling victim to any phishing attempts that may originate from your account.
6. Monitor for Further Issues: Keep an eye on your account for any suspicious activity and take action as necessary to protect your information.

Unfortunately, if the content of the emails has been altered by the hacker, you may not be able to revert them back to their original state. It's crucial to focus on securing your account and preventing further unauthorized access.

---

References:

• Respond to a compromised cloud email account
• Common symptoms of a compromised Microsoft 365 email account