Comments on: Fake Microsoft Account Unusual Sign-in Activity Emails https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/ SCCM | ConfigMgr | Intune | Windows 11 | Azure Fri, 10 Mar 2023 01:04:31 +0000 hourly 1 https://wordpress.org/?v=6.4.1 By: Lucie https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-43214 https://www.prajwaldesai.com/?p=310690#comment-43214 Hi, I have the same issue as Ruby, I clicked on the report the user button and then I hit the send button and sent the email to a weird email address. I tried to change my password but I would not receive the sms with the code. I had to answer questions have my identity verified, which was done successfully, I got an password recovery email to my other email but I messed up the password change, coz I didn’t expect the verification to be done so fast I also changed my phone trusted phone number… the change can take up to 30days.. so now I can’t access the account data until microsoft changes the phone number in my account.

What worries me the most is that any email I sent from the attacked email account out is not delivered…
What shall I do?

Thank you

Lucie

]]> By: Isabel https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-43187 https://www.prajwaldesai.com/?p=310690#comment-43187 In reply to Prajwal Desai.

Thank you!

]]> By: Prajwal Desai https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-43160 https://www.prajwaldesai.com/?p=310690#comment-43160 In reply to Isabel.

Create a rule and block the emails.

]]> By: Isabel https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-43144 https://www.prajwaldesai.com/?p=310690#comment-43144 Hello! I have received that email and I have clicked the link. Now I receive a lot of spam emails What can I do?

]]> By: Chapin https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-42531 https://www.prajwaldesai.com/?p=310690#comment-42531 This was a very helpful article. I received a couple of emails just like this, and reported them both to Microsoft as phishing. Ordinarily, when a malicious email makes it to my inbox, the header tends to reveal that it wasn’t actually sent from the declared source. In this instance, the “sent from” address appears to be no-reply microsoft, but it’s not. In the article you refer to this as header spoofing, and I followed your instructions to view the message source, to confirm as much. Thanks for rendering such an important online security service, Prajwal.

]]> By: Ruby https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-42309 https://www.prajwaldesai.com/?p=310690#comment-42309 Hello, I got this email in my junk and I clicked the report the user and it didnt take me to a new tab but it got me to send “Report the user” to their weird email address and I clicked send. It didnt have any information of mine or I didn’t put anything there.

]]> By: Roger https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-40658 https://www.prajwaldesai.com/?p=310690#comment-40658 I recently got one of these exact messages. I never clicked on any of its links. !!!
Anyways, if someone was attempting to access my account, shouldn’t my Hotmail App for authentication alert me?? I have been using two-way verification for over a year now.

]]> By: Prajwal Desai https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-38991 https://www.prajwaldesai.com/?p=310690#comment-38991 In reply to Willem.

Sign in to your Microsoft Account and check the sign-in activity. What you need to check is the successful sign in and the location. If you find successful sign-in from an unknown location, you must change the account password immediately.

]]> By: Willem https://www.prajwaldesai.com/unusual-sign-in-activity-emails-microsoft/#comment-38947 https://www.prajwaldesai.com/?p=310690#comment-38947 I get such messages, but when I check in my account (not using the link in the mail, but accessing the real MS site) I see that the IP is assigned to “MSFT”!
I use WIndows Live Mail that checks every 10 minutes and the message type is “Automatic Sync”, so I am not sure what is happening here… I see a few attempts from the US and many from my own location.

]]>