Account Outlook.com Hack

[mk-soft]

I've had an account there for ages and this is the first time it's been hacked.
Although two-point authentication is required.
There have been attacks from all over the world with Peru being successful yesterday.
So it is best to check and change the passwords. Also to second e-mail address for authentication.
Resetting the password only worked for me via SMS

[BarryG]

So was two-factor on and you still got hacked?

[mk-soft]

Two-point authentication is required for password changes or other settings.
Yes, this has been bypassed (hacked).

Nothing is secure anymore ...

[BarryG]

Damn.

[NicTheQuick]

Nothing is secure anymore ...

Don't be such a pessimist. That's not true. Of course, two-factor authentication remains secure. But ultimately, this authentication process always happens on the backend. As for what Microsoft messed up this time, we can only speculate.

[mk-soft]

Don't be such a pessimist. That's not true. Of course, two-factor authentication remains secure. But ultimately, this authentication process always happens on the backend. As for what Microsoft messed up this time, we can only speculate.

I agree with that. This is actually secure.
But I wonder what went wrong at MS that the two-factor authentication via a second e-mail address failed so badly and did not reach me.

[skywalk]

Was it a seldom used account?
Logging in often prevent hacks.

[mk-soft]

Was it a seldom used account?
Logging in often prevent hacks.

No,
I have three e-mail addresses which are all in constant use.

[skywalk]

That is troubling.
This may be related to a recent dump of millions of passwords. Data breaches are hard to predict, especially when the notice comes many days or weeks after the event.

[skywalk]

Why 2 posts?

[mk-soft]

Netflix was also affected ...

Email and password changed. You can tell by the fact that the TV no longer works.
Could be repaired via the hotline.

Now, after more than thirty years, I was also the victim of a hack. So change your passwords more often.

[Andesdaf]

For outlook.com it could be useful to create a secondary alias email address that is not public and then transfer the login privilege only to this address. You can still use your normal email address, but login to the microsoft account then is only possible through the alias.

[Randy Walker]

Moral of the story is don't trust MS any further than you can throw them? I don't. And web hosted email entities will always be major target for malevolent hackers so I wont trust any of the web based alteratives either. Never really cared for OutLook anyway. Outlook Express was always more to my liking, so when that went belly up with loss of Win XP I went and hunted down a viable substitute. Here is what I found and Its been treating me very well. Actively updated and getting better with each update: https://www.oeclassic.com/
Great Pop Email client but you have to find yourself a suitable email host. I have always hated web based email and love POP email. Can also do IMAP if you prefer.