account has been hacked and sent malware how do I recover it?

Follow these steps to recover and secure the hacked Outlook.com/Microsoft account and stop further malware being sent:

1. Clean all devices used to access the account
   • Before changing any passwords, run a full antivirus/malware scan on every PC/phone/tablet used with the account.
   • On Windows 10/11 or 8.1, use Windows Defender:
     1. Select Start.
     2. Type Windows Defender in Search, or select Windows Defender.
     3. Turn on protection and run a full scan.
   • Ensure antivirus is set to update automatically and scan regularly.
2. Recover and secure the Microsoft/Outlook.com account
   • Use the official hacked/compromised account troubleshooter: select Start on the page and follow the guided steps to recover the account and sign in again.
   • After regaining access, immediately change the password to a strong, unique one using the official change-password flow.
   • If sign-in is not possible, use the official reset your password option and complete the recovery form with as much accurate information as possible.
3. Check and fix account settings changed by the attacker After signing back in, review these areas for anything you did not configure:
   • Connected accounts: remove any unknown or suspicious connected accounts.
   • Forwarding: turn off any forwarding rules to unknown addresses.
   • Automatic replies: disable any replies the attacker may have set.
4. Review recent activity and add security info
   • Go to the recent activity page at https://account.live.com/activity to see when and where the account was accessed. If sessions or locations look unfamiliar, mark them as “This wasn’t me” where applicable and follow the prompts.
   • Add or confirm alternate email address and mobile phone number as security info so recovery is easier if the account is hacked again.
5. Protect Outlook.com from future malicious use
   • Delete any malware or suspicious messages from Sent, Deleted Items, and Drafts folders.
   • Inform contacts (from a clean account or by other means) that the account was compromised and that they should delete suspicious messages and not open attachments or links previously sent.
   • In Outlook.com, watch for yellow and red safety bars on messages:
     • Yellow bar: attachments/links are blocked; only open if the sender is trusted.
     • Red bar: message is unsafe and blocked; delete it.
6. Ongoing protection
   • Keep the operating system and apps updated on all devices.
   • Keep antivirus software installed and updated.
   • Be cautious with links and attachments, even if they appear to come from known contacts.

References:

• How to recover a hacked or compromised Microsoft account
• Help protect your Outlook.com email account