Got hacked by a rambler.ru account

Reported
Anonymous
2023-02-08T07:58:18+00:00

My microsoft account got hacked by a rambler.ru account and replaced my original email with theirs. that email address is [PII Removed] i requested a security info change from that email address back to my own but now my account is locked for two days and i'm not sure if requesting a security info change alone would be enough to keep the hacker from my account.

from my understanding too, I believe that they originally got to my microsoft account by hacking my email credentials.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
DaveM121 930.8K Reputation points Independent Advisor
2023-02-08T08:33:39+00:00

Hi Keiran,

I am Dave, I will help you with this.

Usually when a hacker changes the Email on a Microsoft Account, then that account cannot be recovered, it is lost and there is no method to recover the account.

If you have been luck enough to be able to recover your account, when the 2 day time period has lapsed, it would be best to ensure you have a very strong password on your account and enable 2 factor authentication on your account to ensure the hacker no longer can access your account.

0 comments No comments
Answer accepted by question author
Don Varnau 19,930 Reputation points Volunteer Moderator
2023-12-31T15:50:36+00:00

Jo Leal wrote:

i got hacked and i need your help

  1. If the hacker/hijacker has changed the email address by creating an alias then deleting your address, now a non-primary alias, you will not be able to recover this account.

Check for that by trying to sign-in with the original address https://outlook.live.com If you are told that the account doesn't exist, you're out of luck.

  1. Relevant article #1

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245 

  1. Article #2

https://support.microsoft.com/en-us/account-billing/help-with-the-microsoft-account-recovery-form-b19c02d1-a782-dee6-93c3-dc8113b20c42 

4. And... since people ask...

Microsoft Support contacted via phone or chat won't be able to help you with this.

In this article https://support.microsoft.com/en-us/account-billing/contacting-support-for-a-microsoft-account-bb65aa6a-9135-31df-0b36-d6318d6f4e0f 

is the warning that

"Important:****To protect your account and its contents, our support agents and advocates are not allowed to send password reset links or access and change account details."

Don

0 comments No comments

148 additional answers

Sort by: Most helpful
  1. Anonymous
    2023-05-20T16:14:07+00:00

    I am so sorry to hear this, I know, this has happened to me. They locked my account up as well to prevent any further acsesss.

    I also had important things on there like family photos, tax docunments and even my work documents. Buisness became slow and all my purchurses I now with microsoft. No Refunds!

    I hope get over it and move on with life.

    God bless you.

    0 comments No comments
  2. Anonymous
    2023-05-17T14:15:32+00:00

    The security of your account is ultimately your responsibility. Yes, Microsoft's support is slow and annoying. Yes, their security measures are nonexistent once an account has been taken over. But in the end its all about how you keep your own devices and accounts secure. If you lose access to your account then Microsoft has a responsibility to at least attempt to help you recover your account if you provide correct information that they need from you, but as the support summarised, they can't do anything once recovery information is replaced as it would go against their Terms of Service. Accept the situation, learn from your mistakes, and move on.

    0 comments No comments
  3. Anonymous
    2023-05-17T12:56:13+00:00

    The original attack took over my email at iinet a month ago.  Iinet promptly quarantined my email. I could see the email rejections going through and rang Iinet as I had already found out about Netflix and Twitter. IInet set up new access to my data for me to login.

    None of these things were happening from my computer or phone.  I have full ESET protection on both devices and no issues found.  They logged in from elsewhere.  I know that.  I had emails from more advanced login protection processes on other accounts.

    My windows security page on my laptop also says my microsoft accounts are perfectly protected.

    Especially the one Microsoft will not give me back. Netflix told me the transaction on my account was from the northern hemisphere. If Netflix knows that and would refund my money and reset my login am I supposed to believe Microsoft cannot verify my device ID and location ? I have used this laptop for 5 years. same login.I have given Microsoft details of my Device ID etc and with very little effort it could be verified.Nothing in Microsoft is at risk.  What right does Microsoft have to decide what risk my data is at on my own laptop?This is My Account with My Data and it was Microsoft's responsibility to protect that data with the authenticator or phone verification and as a last step using my other account to verify as per recommended Microsoft practices. None of that was done.  Then to make it worse I am persecuted further because Microsoft didn't accept any payment verification except a credit card.  I use Paypal. It is safer as it does not hand out credit card information.

    Three weeks after the inital intrusion, and two weeks and four days after the cessation of all malware activity, I was told:-

    When security features are updated on an account, we are unable to assist with an account recovery as these types of updates and/or removal are completely out of control of customer service. We are unable to make any changes to the security information on the account due to security protocols set up and the acceptance of the Microsoft Services Agreement when the account was created.

    To prevent any further damage from being done by the attacker*, the only option we have is to permanently suspend this account to prevent any further use and this suspension will remain on indefinitely.*

    The files, data and emails cannot be recovered or transferred to an alternate account due to the suspension.

    So, to summarise the above

    CUSTOMER SERVICE at MICROSOFT do not have permissin to assist me.

    Once Microssoft customer service verified I was who I said I was, and agreed that some malware had changed the login and reset the password email, rather than passing the issue on to those thst could, Microsoft Customer Service CLOSED MY ACCOUNT PERMANENTLY TO PREVENT MY FURTHER DATA LOSS!

    Up until that point I had NO data loss. Microsoft has now done more damage to my person than anyone else in my living history.

    If I had paid by credit card and not used PayPal, the MICROSOFT account recovery bot would have reset my password.

    Because I found a human to talk to at MICROSOFT, who could verify Paypal and prove who I am, and verify I have been a loyal user sinec 1992, and can see no other damage than the inital email changes, I lose everything.

    It is my family life and memories as well as my legal documents and tax history.My mothers and stepfathers tax and estate papers and countless documents from family members as I am compiling the complete family history for my boys and various 2nd and third cousins. Its the links from laptop to phone, notiications not working and pesistant reminders to login again.

    Its the injustice that makes Windows save my data to my Cdrive on the laptop and then prevent me from accesiing it because MICROSOFT also closed my existing Office subscription. How can it still save there but not let me accesss it. It should not save if I cannot retrieve for goodness sake!

    MICROSOFT closed my account immediately after I wrote to them requesting it not happen as I wanted to ensure the data was safe for the next nine months while Ikeep trying to gain access.

    I can still see it all. Untouched. Unharmed and unaccessible.

    The reason for the account loss and the known behaviours of this malware have been well documented for over two years.  Part of that documentation is on Microsift help pages. There is also a documented precedent where at least one person did get their account back. It is my account and my personal life history that should never have been taken over. When it was proven to be mine it should have been given back.Microsoft should have procedures in place to have prevented it and once proven have done what Iinet and Netflix did and reset my account to give it back to me.Microsoft should not be the judge and jury as to how much if my life is lost due to the highly preventable negligence on their part.Why is my account permanently locked and non returnable?  Iinet took the time to validate and returned my account to me.  So did Netflix. Many other platforms sent mr notifications telling me someone was trying to login. Amazing how that works.My data is there and Microsoft knows it is mine.I used dual factor authentication and used my phone to validate.  Microsoft allowed a known threat to take it over and remove my safeguards.All that is required is to allow me to reset my password via the authenticator or my phone or my other verified backup accounts. I want nothing more than to regain my access to my account.  For the first time in my life, I am seriously depressed and cannot focus properly at work. No-one who knows me especially at work, would believe this of me.

    Injustice is my emotional trigger and the landmine exploded inside me. I cannot accept my family history is lost. Especially as today was my Dads birthday and Monday was my mums. Both passed and now their memories taken from me.

    0 comments No comments