Forum Discussion
OTP
I'm not the specialist for hackers. But
Microsoft has send the code via SMS. SMS can be hacked by intersection of the communication, e.g. using "false base station" or Hacking of the ‘Personal Account’ of the subscriber on the site or application of the cellular operator and forwarding all messages to the attacker`s address.
One of this could be happend.
If you receive the Microsoft code, the attacker send a second one, asking you to verify your login. I don't know how the hacker then can lead you to a fake site (maybe proxy, what ever?). Then the attacker has your password.
You have used the signin-page of microsoft, and you see, your account is at risk. It looks that Microsoft cloud application security has detected a second login for your account, which looks strange, because it is from another location, or it is from a non registered device.This shows, we all have to move to passwordless authentication, because it is phishing resistant.
Harald
Your password may be known to someone if you have https://smsala.com/blog/sms-otp-for-your-customers/ enabled and you received a verification code. Were I you, I'd change your password even though your account should not have been breached
Regards
Irfan
https://smsala.com
- a good suggestion. changed password from time to time. thanks
