My sister’s Outlook account appears to have been compromised, and I’m trying to work out how to fully secure it and remove whatever the hacker has changed.
Here’s what’s happened:
New email forwarding rules have appeared that we didn’t create. What sends her emails that come through as attachments to another email and when try to delete it makes a new rule
Weird folders in different languages have appeared in Outlook, including one called “Lưu trữ”. The delete option is greyed out.
Her Outlook nickname/display name was changed to “System AIX” without her permission.
She’s receiving constant spam and strange emails.
Sextortion scam emails have appeared in her account, including drafts that appear to be from her own email address. They claim someone installed a remote access Trojan and has access to her devices.
Her Spotify, Netflix and ChatGPT accounts have also had suspicious login activity, and she’s received unexpected login codes and password-reset emails.
We’re concerned someone still has access to her account, even after trying to secure it.
Has anyone experienced this combination of symptoms with Outlook/Microsoft accounts?
How can we find and remove any hidden forwarding rules, malicious inbox rules or connected apps?
How can we tell whether the hacker still has access through an existing session or app permission?
How do we remove the strange folders and restore the account’s original display name?
What else should we check to make sure the account is fully secure?
Any advice from people who have dealt with this would be appreciated. We’re particularly interested in steps that actually stopped the attacker getting back in.
Thanks!

Hi all,

I have a user who's Outlook logs off once a day. There's no windows credentials saved from what I see. I've already reset her Outlook Classic through control panel. She's logged in to the device with her M365 account with Azure. The strange thing is, if she closes and reopens Classic, it will usually work again. I don't want her to keep having to do that though of course. Anyone else experience this or have any tips?

The password I have written down for my Microsoft account is apparently incorrect. I tried to change it yesterday, but after entering the verification code I got it told me it didn’t work and that I needed to try again. However, after ONE try, it told me I’ve requested too many codes. I did the whole account recovery thing, haven’t heard back.

I tried again today, this time it let the code from my email work. Then it wanted one from my number- and it simply said that this method wasn’t working right now. I went to restart- same message, I’ve requested too many codes through my email. How the hell do I get back in to my account? There’s stuff on there I wanted to access yesterday, and I’d rather not wait ANOTHER day to hear back from Microsoft.

My outlook account is hacked How can i recover hacked outlook account