My Office 365 account got hacked. Now What ??!!
So, you found out that one or more of your Office 365 accounts have been hacked. You are getting spam emails that appear to have been sent by some internal users, or getting random authentication requests / password change notification when you know you did not generate any. You need to act fast. Time is the enemy ... The world is conspiring ... The damage could be irreversible ... It's a battle of wits. Drama aside, the action plan should be to (1) Assess the damage (2) Take corrective actions (3) Clean up (4) Update your security setup to prevent future issues. Here’s some steps you should take to get it back in check: Assess: Check the Sent or Deleted Items folders for the hacked to look for emails gone out to unidentified recipients. In many cases the attacker will delete the emails after sending, so run message trace to check extent of such emails sent out. Check for devices linked to the user’s mailbox. Remo...