無法刪除 Outlook 收件匣規則，帳號遭駭

Question

您好，我的 Hotmail 帳號疑似遭到駭客入侵。

目前情況如下：

1. 信箱中出現自動轉寄規則，但我無法自行刪除。
2. 我已經完成：更改密碼、開啟兩步驟驗證、登出所有裝置。
3. 但收件匣規則仍然存在，無法移除。

懇請貴公司協助清除所有收件匣規則，並確認帳號安全。

謝謝。

Hello, my Hotmail account appears to have been compromised.

The current situation is as follows:

1. There are malicious inbox rules in my account that I cannot delete.
2. I have already changed my password, enabled two-factor authentication, and signed out of all devices.
3. However, the malicious inbox rules are still present and cannot be removed.

Please help me remove all existing inbox rules and secure my account.

Thank you.

Answer 1

Hello,

Make sure you do this on a computer, not on smartphone or tablet. Go to https://www.outlook.com and log in, click on the gear icon in the top right to launch the settings.

Then, on the Mail tab, go to Rules. Are there any rules set up here? If yes, delete them all.

Then check the conditional transfer, again, if it's there, delete it.

Then, check Forwarding and IMAP, If any items are present, delete them as well.

===========

If you can't find anything, go to https://account.live.com > Your info > Sign in Preferences. Make sure to check all the aliases here. If you don't recognize any there, delete it.

Then go to Security > Manage How I sign in, make sure all contact info is yours.

Please make sure you change your password and enable two-step verficiation.

Go to your account online, go to Devices, remove any devices you don't recognize.

Then go to Security, click on Sign out everywhere. This is meant to kill any session that's still connected. Unfortunately, this one will take 24 hours to take effect. If the rules keep coming back, delete them again after 24 hours.

Then, take one step further - Go to your Microsoft account online  https://account.live.com > Sign in > Your info > Sign in preference. Add an alias - You have two options here:

Create new: this will allow you to use the native domain outlook.com to create a new alias.

Add existing: this will allow you to add a 3rd party email address, such as yahoo, gmail, as long as they are not already associated with another Microsoft account.

Once added, make this new alias your primary alias, do NOT delete the old alias. Then at the bottom, click on "Change sign in preference". On the next page, uncheck the box for the old alias. This means, from now one, the old alias cannot be used to sign into your Microsoft account, but it can be still used to receive emails, etc.