My email got hacked, my incoming and old emails keep turning into blackmail emails even after complete reset and 2fa

Question

My email got hacked, my incoming and old emails keep turning into blackmail emails even after complete reset and 2fa

smk vnm 0

My outlook account is compromised. incoming emails are being modified into blackmail emails. I have changed my password, revoked app acess, signed out all sessions and enabled 2fa. however the issue still persists. I have no other explanation for this other than a server side compromise. pls help

1 answer

Your answer

Answer 1

EmilyS726 210.5K Independent Advisor

Hello,

Make sure you do this on a computer, not on smartphone or tablet. Go to https://www.outlook.com and log in, click on the gear icon on the top right to launch the settings.

Then, on the Mail tab, go to Rules. Are there any rules set up here? If yes, delete them all.

Then check the conditional format, again, if it's there, delete it.

Then, check Forwarding and IMAP, If any items are present, delete them as well.

====================

In addition, this can be due to a malicious script running on your device. Are you using Windows device to check emails? Do you use any email app, such as Outlook Classic or New Outlook? Please go to the app, remove the account from settings. Then go here: https://learn.microsoft.com/defender-endpoint/safety-scanner-download

Download and run the 64 bit scanner, run a full scan. Tell me what the final results are.

smk vnm 0 Reputation points

2026-02-28T23:51:06.03+00:00

Thanks for the answer.
There are no rules, no conditional format, no forwarding or imaps. I found an app access from thunderbird which i removed, but the problem still persists.
EmilyS726 210.5K Reputation points Independent Advisor

2026-02-28T23:52:43.96+00:00

What about the scan? You already finished the full scan????
smk vnm 0 Reputation points

2026-02-28T23:58:27.8733333+00:00

I installed a new windows
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T00:31:33.0433333+00:00

Are you saying you did a clean install, or factory reset? Or reset keeping files? If you don't mind, please be more specific.

When did the reinstall happen?
smk vnm 0 Reputation points

2026-03-01T00:40:13.2766667+00:00

I did a new instal, formatting C and keeping file on other partitions. The reinstal was yesterday.
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T00:44:09.5333333+00:00

Ok, help me understand the timeline if you don't mind -

Reinstall was yesterday, then after that, you removed the account from Thunderbird? Has it been 24 hours yet since you did the signing out everywhere?

As of now, new emails coming in is still being changed to blackmail, right?
smk vnm 0 Reputation points

2026-03-01T01:14:09.0466667+00:00

I did the reinstall yesterday, reset everything today, my incoming emails and even old emails get turned into the same blackmail email. when i delete the blackmail email, the latest 15/20 emails turn into the same blackmail email and so on. it hasn't been 24 hours since i signed out of eveything.
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T01:16:26.2733333+00:00

Thank you. Now this is much more clear. Thank you.

Give it a full 24 hours, as signing out of all sessions/devices can take up to 24 hours. So if another device is still running on cached credential it can still use the script to generate this.
smk vnm 0 Reputation points

2026-03-01T01:24:45.01+00:00

Thanks you for your help, i ll check again in 24hours
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T01:25:20.4466667+00:00

You are welcome.

Share via

My email got hacked, my incoming and old emails keep turning into blackmail emails even after complete reset and 2fa

1 answer

Your answer