Dear nube the first
Welcome to Microsoft Community.
Hello, based on your feedback, I would like to know if you have clicked on any other suspicious email links before?
Checking your message here, since Microsoft can't control the hacker's activities, that is to say, it's impossible to clearly see the hacker's action track, but more than your feedback of the current encounter, we can judge that there are two possibilities:
- The other party only obtains the name of your mailbox, and then it creates a mailbox with the same name through a special way, but actually sends a letter to another mailbox to carry out intimidation and extortion at a time.
- The other party has already obtained all the private information such as your mailbox name, and then it directly logs in other places and performs the same mailbox to send letters.
But no matter what the possibility, you are now seeing a serious security risk to your account (which includes your computer and cell phone), if you can, you should follow the steps below to protect the security of your account at the first time:
- Check your recent activity page. This shows you when and where you've used your Microsoft account in the last 30 days. You can expand any activity listed to see location details and find out how the account was connected, using a web browser, phone, or other method.
If you only see a Recent activity section on the page, you don't need to confirm any activity. What is the activity page:What is the Recent activity page? - Microsoft Support
- Change your password immediately: This is the first and most important step to take. You should change your password to a strong, unique password that you haven't used before. Be sure to use a combination of letters, numbers, and symbols to make Reset a forgotten Microsoft account password - Microsoft Support
- Enable two-factor authentication: This is an additional layer of security that requires you to enter a code sent to your phone or email before you can access your account. This will help prevent unauthorized access to your account in the future:How to use two-step verification with your Microsoft account - Microsoft Support
- Check your account settings: Make sure that your account settings have not been changed by the hacker. Check your email forwarding settings, filters, and rules to make sure they're set up correctly.
At the same time, use antivirus software to check the used computers and cell phones, but combined with the information from the hackers, if it is disguised as a normal application, it may be able to escape from the antivirus software, in this case, due to the inability to find the location of the spyware and the state of the disguised, and then only to restore the factory settings for the cell phone you are using, and for computers need to empty all the disk and partition to reinstall the used system. For computers, it is necessary to clear all disks and partitions and reinstall the system, and this process will clear all programs you have, but only in this way, to ensure the safety of your device.
Disclaimer: At this point, we have exhausted all troubleshooting and I recommend that we try to perform a clean install to get your computer back into a working condition. Please ensure that you backup any important data, including Documents, Pictures, Videos, and more.
Feel free to text back if you need further help.
Best wishes
Chris.S-MSFT | Microsoft Community Support Specialist