Got hacked by a rambler.ru account

Reported
Anonymous
2023-02-08T07:58:18+00:00

My microsoft account got hacked by a rambler.ru account and replaced my original email with theirs. that email address is [PII Removed] i requested a security info change from that email address back to my own but now my account is locked for two days and i'm not sure if requesting a security info change alone would be enough to keep the hacker from my account.

from my understanding too, I believe that they originally got to my microsoft account by hacking my email credentials.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
DaveM121 930.8K Reputation points Independent Advisor
2023-02-08T08:33:39+00:00

Hi Keiran,

I am Dave, I will help you with this.

Usually when a hacker changes the Email on a Microsoft Account, then that account cannot be recovered, it is lost and there is no method to recover the account.

If you have been luck enough to be able to recover your account, when the 2 day time period has lapsed, it would be best to ensure you have a very strong password on your account and enable 2 factor authentication on your account to ensure the hacker no longer can access your account.

0 comments No comments
Answer accepted by question author
Don Varnau 19,930 Reputation points Volunteer Moderator
2023-12-31T15:50:36+00:00

Jo Leal wrote:

i got hacked and i need your help

  1. If the hacker/hijacker has changed the email address by creating an alias then deleting your address, now a non-primary alias, you will not be able to recover this account.

Check for that by trying to sign-in with the original address https://outlook.live.com If you are told that the account doesn't exist, you're out of luck.

  1. Relevant article #1

https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245 

  1. Article #2

https://support.microsoft.com/en-us/account-billing/help-with-the-microsoft-account-recovery-form-b19c02d1-a782-dee6-93c3-dc8113b20c42 

4. And... since people ask...

Microsoft Support contacted via phone or chat won't be able to help you with this.

In this article https://support.microsoft.com/en-us/account-billing/contacting-support-for-a-microsoft-account-bb65aa6a-9135-31df-0b36-d6318d6f4e0f 

is the warning that

"Important:****To protect your account and its contents, our support agents and advocates are not allowed to send password reset links or access and change account details."

Don

0 comments No comments

148 additional answers

Sort by: Newest
  1. Anonymous
    2023-05-17T12:56:13+00:00

    The original attack took over my email at iinet a month ago.  Iinet promptly quarantined my email. I could see the email rejections going through and rang Iinet as I had already found out about Netflix and Twitter. IInet set up new access to my data for me to login.

    None of these things were happening from my computer or phone.  I have full ESET protection on both devices and no issues found.  They logged in from elsewhere.  I know that.  I had emails from more advanced login protection processes on other accounts.

    My windows security page on my laptop also says my microsoft accounts are perfectly protected.

    Especially the one Microsoft will not give me back. Netflix told me the transaction on my account was from the northern hemisphere. If Netflix knows that and would refund my money and reset my login am I supposed to believe Microsoft cannot verify my device ID and location ? I have used this laptop for 5 years. same login.I have given Microsoft details of my Device ID etc and with very little effort it could be verified.Nothing in Microsoft is at risk.  What right does Microsoft have to decide what risk my data is at on my own laptop?This is My Account with My Data and it was Microsoft's responsibility to protect that data with the authenticator or phone verification and as a last step using my other account to verify as per recommended Microsoft practices. None of that was done.  Then to make it worse I am persecuted further because Microsoft didn't accept any payment verification except a credit card.  I use Paypal. It is safer as it does not hand out credit card information.

    Three weeks after the inital intrusion, and two weeks and four days after the cessation of all malware activity, I was told:-

    When security features are updated on an account, we are unable to assist with an account recovery as these types of updates and/or removal are completely out of control of customer service. We are unable to make any changes to the security information on the account due to security protocols set up and the acceptance of the Microsoft Services Agreement when the account was created.

    To prevent any further damage from being done by the attacker*, the only option we have is to permanently suspend this account to prevent any further use and this suspension will remain on indefinitely.*

    The files, data and emails cannot be recovered or transferred to an alternate account due to the suspension.

    So, to summarise the above

    CUSTOMER SERVICE at MICROSOFT do not have permissin to assist me.

    Once Microssoft customer service verified I was who I said I was, and agreed that some malware had changed the login and reset the password email, rather than passing the issue on to those thst could, Microsoft Customer Service CLOSED MY ACCOUNT PERMANENTLY TO PREVENT MY FURTHER DATA LOSS!

    Up until that point I had NO data loss. Microsoft has now done more damage to my person than anyone else in my living history.

    If I had paid by credit card and not used PayPal, the MICROSOFT account recovery bot would have reset my password.

    Because I found a human to talk to at MICROSOFT, who could verify Paypal and prove who I am, and verify I have been a loyal user sinec 1992, and can see no other damage than the inital email changes, I lose everything.

    It is my family life and memories as well as my legal documents and tax history.My mothers and stepfathers tax and estate papers and countless documents from family members as I am compiling the complete family history for my boys and various 2nd and third cousins. Its the links from laptop to phone, notiications not working and pesistant reminders to login again.

    Its the injustice that makes Windows save my data to my Cdrive on the laptop and then prevent me from accesiing it because MICROSOFT also closed my existing Office subscription. How can it still save there but not let me accesss it. It should not save if I cannot retrieve for goodness sake!

    MICROSOFT closed my account immediately after I wrote to them requesting it not happen as I wanted to ensure the data was safe for the next nine months while Ikeep trying to gain access.

    I can still see it all. Untouched. Unharmed and unaccessible.

    The reason for the account loss and the known behaviours of this malware have been well documented for over two years.  Part of that documentation is on Microsift help pages. There is also a documented precedent where at least one person did get their account back. It is my account and my personal life history that should never have been taken over. When it was proven to be mine it should have been given back.Microsoft should have procedures in place to have prevented it and once proven have done what Iinet and Netflix did and reset my account to give it back to me.Microsoft should not be the judge and jury as to how much if my life is lost due to the highly preventable negligence on their part.Why is my account permanently locked and non returnable?  Iinet took the time to validate and returned my account to me.  So did Netflix. Many other platforms sent mr notifications telling me someone was trying to login. Amazing how that works.My data is there and Microsoft knows it is mine.I used dual factor authentication and used my phone to validate.  Microsoft allowed a known threat to take it over and remove my safeguards.All that is required is to allow me to reset my password via the authenticator or my phone or my other verified backup accounts. I want nothing more than to regain my access to my account.  For the first time in my life, I am seriously depressed and cannot focus properly at work. No-one who knows me especially at work, would believe this of me.

    Injustice is my emotional trigger and the landmine exploded inside me. I cannot accept my family history is lost. Especially as today was my Dads birthday and Monday was my mums. Both passed and now their memories taken from me.

    0 comments No comments
  2. Anonymous
    2023-05-08T22:59:52+00:00

    I would be very interested to hear of your reply. My Microsoft Account was taken over after getting into my email at another provider platform. Within 24 hours that threat was removed the account frozen and another login organised for me go get to my emails.

    Microsoft have so far agreed it was taken over. Know it is not me and will not give me access to the data on onedrive.

    I am shattered currently.

    0 comments No comments
  3. Anonymous
    2023-05-08T17:44:50+00:00

    i got the same issue today i concated virtual assistent so im waiting what will happend

    https://vsa.services.microsoft.com/en-us/v1.0/?partnerId=cbc3e761-f603-4a97-9113-2b09298272db&flowId=Xbox-ContactUs&partnerName=Xbox&initialquery=Cant%20sign%20in%20to%20Xbox&theme=GREEN
    this
     is the link i used i guess u can say that microsoft email is xbox live aswell and before u start talking u need to say "i want to talk to real person" and u need to log in with microsoft account (you can use new created one)

    0 comments No comments