An integrated threat protection solution designed to detect, investigate, and respond to cyber threats across Microsoft 365 services.
The email demanding money is almost certainly a scam or ransomware-style extortion attempt. Treat it as malicious and do not pay or reply.
To protect the computer and data, follow these steps:
- Use Microsoft Defender / antivirus
- Ensure an active, up-to-date antimalware program is running. Windows 10 includes Microsoft Defender Antivirus and it is turned on by default.
- Run a full scan on all PCs and phones used for email to check for malware.
- Do not install multiple antivirus products at the same time, as this can make the system slow or unstable.
- Keep Windows and apps updated
- Make sure Windows Update is turned on so the operating system and applications receive the latest security patches. Updates help keep the PC safer from known vulnerabilities.
- Be careful with email and links
- Do not open attachments or click links in suspicious emails, especially those demanding money or threatening to leak data.
- Do not open email messages or attachments from unfamiliar senders or that you were not expecting.
- Review guidance on how to recognize phishing and online scams to avoid similar attacks in the future.
- Check Outlook / Microsoft account security
- Review recent account activity at the Microsoft account security page to see if there are unusual sign-ins.
- Add or confirm alternate email and mobile phone number as security info so the account can be recovered if compromised.
- General malware and scam protection
- Use a browser with a pop-up blocker enabled (Microsoft Edge has this on by default) to reduce malicious pop-ups.
- Be extremely careful about installing apps or downloading files, and only use reputable sources.
If the scan finds malware, follow the removal steps provided by the antivirus. If no malware is found and there are no unusual sign-ins, the email is likely just a scare tactic with no actual access to the system.
References: