Outlook account hacked and persistent threat email even after activating security

Question

Hello,

My Microsoft account ([PII Removed]) appears to have been compromised. Despite changing my password and enabling multi-factor authentication, unauthorized emails with threatening content are being sent from my account.

I have noticed draft emails reappearing, flagged and pinned messages I did not create, and suspicious activity on my account. I have revoked all app permissions and tried logging out of all devices, but the issue persists.

Please help me secure my account completely and stop any unauthorized access immediately.

Even if I delete this email that is in my inbox, it appears at the same time in the draft and returns to the pinned and flagged inbox! In other words, someone has access even after I activated everything security and disconnected the devices through the Microsoft account, I deactivated rules, etc. from the email too!

Thank you for your assistance.

Answer 1

Obrigado por me avisar.

Sugiro entrar em contato com o Suporte da Microsoft via chat ao vivo e solicitar um escalonamento:

• Aqui está o link: https://support.microsoft.com/home/contact
• Digite essa palavra-chave e pressione Enter: Entrar em contato com o suporte.
• Na parte inferior, clique em "Entrar para entrar em contato com o suporte" e entre com sua conta pessoal da Microsoft (não é corporativa ou de estudante) ou clique em "Entrar em contato com o suporte" se você já estiver conectado.
• Em Produtos e serviços, selecione "Windows".
• Em Categoria, selecione "Suporte técnico".
• Clique em "Conversar com um agente de suporte em seu navegador da web".

Se você ficar preso em um loop, use as palavras-chave "Entrar em contato com o suporte" ou "Chat ao vivo" (sem as aspas) e clique em "Entrar em contato com o suporte" na parte inferior.

Eu realmente espero que esta informação seja útil!

Fique seguro,

João J.D.

Answer 2

As I mentioned in the text, I've already activated all the authentication methods mentioned, including MFA, using Microsoft Authenticator, changed my password to a complex and random one, and signed out of all my accounts. I haven't lost access to my account yet. I was able to do all of this. However, as I mentioned, there's this email in the image, which, as you can see, is "PIN" and "FLAGGED." Every time I delete it, it comes back from the draft and immediately reappears in my inbox. In other words, they still have access to my account to be able to do this.

Answer 3

Hi, I'm John! I will help you with this.

This is a phishing attempt. Please don’t click on any links or respond to the message.

Scammers often use these tactics to trick people into giving away personal information or money. Here are some steps you can take to protect yourself and your data:

• Do you still have access to your Microsoft account, and are you currently signed in? Checking if you still have access to your Microsoft account and making sure you're currently signed in https://account.microsoft.com/ If you’re locked out, let me know.
• Just to be safe, I’d recommend to sign out everywhere. Visit: https://account.live.com/proofs/manage/additional Scroll down to Sign me out and select "Sign me out".
• And changing your password again and enabling two-step verification if you haven’t already. This will add an extra layer of security to prevent future unauthorized access.
• "What is: Multifactor Authentication" https://support.microsoft.com/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123-eda06bddf661
• "How to use two-step verification with your Microsoft account" https://support.microsoft.com/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4
• If you notice anything unusual in your account settings or purchase history, you might also want to check the Microsoft account security page https://account.microsoft.com/security to review recent activity.

If you need to contact Microsoft Support please let me know and I'll provide you with the steps.

Click "Add comment" to let me know.

Regards,

John J.D.