Bad People Hiding Out In Tech.

Take immediate steps on three fronts: accounts, devices, and scams/phishing.

1. Secure email, bank, and other accounts

• Change passwords immediately for:
  • Email accounts (especially the one on the hijacked domain and any Microsoft/Outlook/Hotmail accounts used with Windows or Microsoft services).
  • Banking, credit cards, and any financial services.
  • Any other accounts that reuse the same or similar passwords.
• Use strong, unique passwords and enable multi-factor authentication (MFA) wherever possible.
• For any Microsoft account that may be compromised, follow the official recovery and hacked-account guidance and complete the account recovery process with as much accurate information as possible.
• Inform banks and card issuers that accounts may be compromised so they can monitor, block, or reissue cards and credentials.

2. Clean and secure devices

• Run a full, up-to-date antivirus/antimalware scan on every Windows PC and mobile device used to access email, banking, or cloud services.
• Do not click suspicious links or open unexpected attachments in email, Teams, SMS, or social media. Phishing is a common way attackers steal credentials and plant malware.
• If malware is suspected or scans keep finding threats, back up important data and consider a full reset/reinstall of affected devices.

3. Recognize and avoid ongoing phishing and extortion

• Treat any email or message that:
  • Claims to have compromising photos, videos, or audio and demands payment (for example in Bitcoin), or
  • Claims accounts will be closed or disabled unless an urgent action is taken, as likely phishing or extortion.
• Do not pay, reply, or click links in these messages. Extortion emails are a common scam tactic and often use stolen or guessed data to sound convincing.
• Signs of phishing and scams include:
  • Urgent calls to action or threats (“act now or lose access,” “pay within 24–48 hours”).
  • Messages from first-time or infrequent senders, or marked as [External].
  • Spelling and grammar errors, generic greetings, or mismatched/suspicious email domains.
  • Suspicious links or unexpected attachments. Hover over links (without clicking) to see the real destination; if it does not match the claimed site, do not open it.
• If Outlook or another mail client shows a banner that the sender cannot be verified, treat the message as suspicious and avoid interacting with it.

4. Protect identity and data going forward

• Assume some personal data may already be exposed and:
  • Monitor bank and card statements closely and set up alerts.
  • Consider placing alerts or holds with financial institutions as appropriate.
• Be cautious about oversharing personal information online, especially on social media, as attackers can use it to impersonate or target.
• Continue to use security tools such as Microsoft Defender on Windows and mobile to help detect malware and suspicious activity.

If there is any indication of blackmail, threats, or financial fraud, preserve evidence (emails, screenshots, transaction records) and report it to local law enforcement and the relevant financial institutions.

References:

• Protect yourself from phishing
• Protect yourself from online scams and attacks
• Protecting yourself from identity theft online
• Phishing and suspicious behavior in Outlook