Conta Invadida

Question

Minha conta outlook foi invadida no dia 29/09/2025. Entrei em contato com o suporte pedindo auxílio para o problema em questão. O suporte me orientou a fazer alguns procedimentos, tendo em vista que eu ainda tinha acesso, dessa forma eu alterei o alias, adicionei autenticação de dois fatores, mudei a senha desconectei todos os dispositivos conectados, tudo conforme orientação do suporte. Hoje no dia 01/10, fui surpreendido novamente com o envio de um sequencial de e-mails para terceiros e etc, ou seja, a conta foi novamente invadida. Minha preocupação não é com essa conta em si, mas pelo fato de que todas as demais contas tanto bancárias quanto de redes sociais são vinculadas a ela. Alguém consegue me auxiliar?

Utilizo a conta tanto no período laboral via windows quanto em casa via Mac e Iphone.

Answer 1

Hi Lucas,

Thanks for sharing your concern, Outlook account was compromised again especially after you already took all the right steps the first time. I can imagine how stressful this must be, especially with your banking and social media accounts tied to that email. You're absolutely right to be concerned.

From what you’ve described, it sounds like you followed Microsoft Support’s guidance after the first incident on September 29, 2025 changing your alias, updating your password, enabling two-factor authentication, and disconnecting all devices. That’s exactly what should be done in a situation like this.

However, the fact that your account was used again on October 1 to send emails suggests that something deeper might still be going on. Here are a few possible reasons:

A malicious app or token may still have access to your account.

One of your devices (Windows, Mac, or iPhone) might be compromised with malware or a keylogger.

There could be hidden inbox rules or forwarding settings that are silently redirecting your emails.

 

Here’s What You Can Do Next to help you lock things down:

Secure Your Account Again

Use a clean device (not your usual PC, Mac, or iPhone) to change your password again.

Go to https://account.live.com/consent/Manage and remove all third-party app access.

Visit https://account.live.com/activity to sign out of all sessions and check for suspicious logins.

 

Scan All Devices

Windows: Run a full scan with Microsoft Defender or Malwarebytes.

iPhone: Check for unknown profiles under Settings > General > VPN & Device Management.

 

Check Outlook Settings

Log in to Outlook Web and go to Settings > Mail > Rules delete any suspicious rules.

Check for auto-forwarding or unknown connected accounts.

Contact Microsoft Support Again

Since this is a repeat incident, I recommend asking for escalation to the Account Recovery and Security team

 Secure Your Linked Accounts

Change passwords and enable 2FA on all accounts tied to your Outlook email.

Consider updating your recovery email to a new, secure address.

If the issue continues, it might be safest to create a new Outlook account and gradually move your services over to it.

Let me know how it goes, I’m here to help you.