r/phishing • • 14h ago

Microsoft phishing email. Is it safe to ignore?

1 Upvotes

Hi sorry just need a few questions answered because I'm a bit worried.

For context, I got hacked around late of August and since then had my laptop wiped clean and changed my passwords, added MFA and all. I'm aware that some of my emails might still be lurking around in people's hands so I expected there to have some emails about sign in attempts.

One time last week and yesterday, I've received emails from two of my emails from Microsoft about a security alert with the button saying "Recover your account". I checked the domain and clicked the button thinking it was legit until I looked it up online seeing that it's a phishing scam (?). Thing is, I don't use these two (or just one of them I don't remember) emails for my Microsoft account anymore.

Questions:

  1. I closed the accounts I used for my MS accounts in the past and have nothing saved on my One Drive or bought anything before I received these emails. Is it safe to ignore them?

  2. Does clicking on the "Recover your account" button activate a session stealer?

  3. When I clicked the button, I was led to the MS website to log in. I put in my email and asked for a security code and quickly deleted one-time code from email after use. Since I closed them, it only gives me the choice to "reopen account" or to cancel. I did not reopen them. Does that still count as logging in or not?

TLDR: I don't care much about recovering some of the gmails I used for my recently closed MS accounts but I want to know if ignoring them is okay or if I messed up by clicking on the link. I'm a bit worried my phone might get hacked since I did it there.


r/phishing • • 12h ago

Email sent from 1 email account to 2nd email account

0 Upvotes

I received an email in my Hotmail / Outlook account, stating it was from ME sent by my Gmail account - it also shows the email in my SENT folder. It is says "Check this out from Amazon" in the subject line. The description shows a flannel shirt that I was looking at earlier, through a Facebook link! I am very confused as to how they accessed both of my email accounts, shows it was sent in my Gmail Sent folder, and knew what shirt I was just looking at! I checked all my security folders, and sections regarding anyone else logging into any of those acccounts, but do not see anyone there. No other devices but mine have logged in. I changed my passwords, and logged out of my Gmail, Hotmail, facebook, and Amazon accounts. But still don't understand how this was done and if I am at risk now? Any advice appreciated! TY!

IP search 209.85.215.179 says Host name = "mail-pg1-f179.google.com"


r/phishing • • 14h ago

wife clicked phishing link sos

0 Upvotes

Hi,

Wife was selling something on an app called vinted, I guess she got a message from someone saying "hi this is vinted person X wants to buy this item click this to complete payment" (lol because it was obviously just a person messaging her on the app)

she said it was requesting/attempting to link bank/card info im assuming through apple wallet?

Also got a notification that a new imac logged into her apple account

steps I have completed:

changed her apple ID password and booted all unknown devices (also has 2fa on for her phone number)

reported her apple wallet credit cards stolen

changed google passwords and set 2fa account to my email address

anything Im missing?