Microsoft Sign in part of Hack?

Question

I tried to log into my microsoft acct, one of the sign in choices was an email (my name)@mail.ru, no such acct on my part. What do I do now?

Answer 1

Hello Denis,

If you see an unfamiliar email address (like one with a @mail.ru domain) when trying to log into your Microsoft account, it’s possible that your account may have been compromised. Here’s what you should do to secure your account:

Do Not Attempt to Log In with the Unfamiliar Email

• Avoid clicking on the email or attempting to log in using the unfamiliar @mail.ru email address. This could be part of a phishing attempt.

Immediately Change Your Microsoft Account Password

• Go to the Microsoft Account Password Reset page: https://support.microsoft.com/en-us/account-billing/change-your-microsoft-account-password-fdde885b-86da-2965-69fd-4871309ef1f1
• Follow the steps to reset your password. Make sure you use a strong, unique password that you don’t use for other accounts.
• If you're unable to log in, choose the "I forgot my password" option and use your recovery email or phone number to regain access.

Enable Two-Factor Authentication (2FA)

• Once you regain access, immediately enable two-factor authentication (2FA) to add an extra layer of security.
  • Go to Security > Two-step verification within your Microsoft account settings.
  • Set up 2FA using a phone number or an authentication app like Microsoft Authenticator.

Check Recent Activity

• After securing your account, review the Recent Activity page to see if there have been any unauthorized login attempts or suspicious activities.
  • Go to Security > Recent Activity and carefully review sign-ins, especially those from unknown locations or devices.

Remove Any Unfamiliar Email Aliases

• Go to your account settings.
• Check for any unfamiliar email addresses (aliases) linked to your account.
• If you see the @mail.ru or any other unauthorized alias, remove it immediately.
  https://support.microsoft.com/en-us/account-billing/check-the-recent-sign-in-activity-for-your-microsoft-account-5b3cfb8e-70b3-2bd6-9a56-a50177863357

Check Account Recovery Information

• Verify that your recovery email and phone number are correct and haven't been altered by anyone else.
  • Go to Security > Advanced Security Options to review and update your recovery information.

Run Security Checks on Your Devices

• Run a full antivirus and malware scan on all devices you use to access your Microsoft account to ensure that no malware is responsible for the unauthorized access.