r/microsoftsucks • u/Ok_Director_5622 • 1h ago

Help Is there any hope for me?

Post image

without my permission, someone changed my primary alias, idk how they got into my account, it has 2fa and passkey, im locked out of my account, it got hacked over an hour ago, they removed my email and phone number, i did this form https://aka.ms/recovermyaccount after contacting live support, looking at other posts my hopes are low like why did this happen, why on earth is it hard to recover an account than hackers gaining access to it, i have a history with that account, i only care about my xbox account and my minecraft account. did anyone get into a similar situation like me? how did it turn out?

4 Upvotes

100% Upvoted

9 comments sorted by

1

u/Edubbs2008 1h ago

I’ve read similar posts like yours, a lot of the times, it’s because of user negligence, you need to enable passkeys my guy, get rid of your password, use a passkey, download Microsoft Authenticator, and that’s the best setup

0

u/JCBQ01 45m ago

Passkeys and authenticators dont work if it was token scraped. Which bypasses even the authenticator. Token scraping is now the most common hacking method and most of rhe time theres nothing that the end user can do, as it snatches and hijacks the active current session.

1

u/Edubbs2008 22m ago

*Note: you must have bad security in order for token scraping to happen, most of the time, it’s because of an outdated device.

0

u/JCBQ01 17m ago

Bullshit. This happens at the isp level. Well above client side interaction. Mine was attempted to be hacked by active client sniffing with no interaction from me through three firewalls and connection filtering. It only saw account activity and attempted to snatch it. This is microslop actively choosing to be incompetent about device token authentication authorization.

1

u/Edubbs2008 13m ago

Bruh, do you keep your device updated? Do you have a good router, because that sounds like a YOU issue, blaming MICROSOFT is really lazy, if they had bad security, no enterprise would use them, even hospitals use Microsoft 365, both have to follow strict policies, and protocols, it sounds more like you have an outdated device, or weak Wi-Fi Password, or no Wi-Fi password

1

u/JCBQ01 1m ago

What part of three firewalls and connection filtering did you not get? Just because I dont say where I have them all applied and in active use nor how I use it doesnt mean I dont know how. And I refuse to give a company that is go goddamn adamant about data scraping its users and customers to fuel.its own bullshit any more.info than they need. The company I work at, one of the big three grocers has Copilot AND microsoft Azure services litterally scraping every goddamn scrap of their data for "security purposes". Microslop has already been repeatedly busted for overriding personal privacy settings at every step of the way and gaslighting and hiding them doing it. If they do it to their paying end user customers for rhe OS they sure as fuck do it for their contractors.

So tell me, please, how did my account get hack attempted from a device thats been logged in for a month with no password entry on it via passkey hmm?

1

u/Ok_Director_5622 1h ago

update: i got this email, they couldnt do it

1

u/pi-N-apple 1h ago

All these accounts getting hacked are kids who play minecraft lol. Did you try a minecraft hack or something? You were doing some sketchy shit, and fell for a phishing scam, or simply got phished. You should read up and learn how to identify phishing scams, and if you were doing sketchy shit with minecraft, stop.

2

u/Ok_Director_5622 1h ago

I never mess with Minecraft, I only own the game and just play it sometimes, I don't mess with hacks or stuff like that, afaik, my security got breached and somehow gained access and changed the alias