Microsoft Account

JGToy · 14 Jul 2023

Looks like that MA isn't that secure at all...
On Wed I had this incident, so log in, change the password and everything was fine.

Not quiet, this morning was all hacked again!

No fun! You all keep yours eyes open...

Bree · 14 Jul 2023

Do you not use 2FA?

https://support.microsoft.com/en-us/...0-93b4585e7eb4

JGToy · 14 Jul 2023

Bree said:

Do you not use 2FA?

https://support.microsoft.com/en-us/...0-93b4585e7eb4

No I'm not using it! Perhaps I should turn it on.

Bree · 14 Jul 2023

JGToy said:

No I'm not using it! Perhaps I should turn it on.

I'd strongly recommend that you do.

JGToy · 14 Jul 2023

Bree said:

I'd strongly recommend that you do.

Thanks for the advice! I just turn it in, although it will complicates a bit.

Samuria · 14 Jul 2023

What was the security used? It can be another account thats hacked often they send a message via email so if thats used and they have your email password thaty can chage MS password

JGToy · 14 Jul 2023

Samuria said:

What was the security used? It can be another account thats hacked often they send a message via email so if thats used and they have your email password thaty can chage MS password

I have change the email password already (actually twice).
Unless they already have or had the new pw too.

Samuria · 14 Jul 2023

Check here Have I Been Pwned: Check if your email has been compromised in a data breach

JGToy · 14 Jul 2023

Samuria said:

Check here Have I Been Pwned: Check if your email has been compromised in a data breach

Interesting... I didn't know that site existed!

Well, I did the check and for my surprise

Thanks for the information, it was useful.

User2468 · 15 Jul 2023

I'm curios. Go here and copy your IP address. Now go here and paste your IP address in the search box and see if you have any open ports. If so let me know what router or modem you're using. DO NOT share your IP address.

If Shodan doesn't show anything try here as well.

You can roll 2FA with the free and open source Aegis App for Android. It may be coded for iOS as well. Not sure. For desktop I use the Keepass password manager with the KeepassOTP plug-in. Or if you're not very computer inclined you can use a paid version of Bitwarden which is $10/year. Bitwarden is free as well, but you don't get 2FA.