IMAP Hack

%3CLINGO-SUB%20id%3D%22lingo-sub-1928601%22%20slang%3D%22en-US%22%3EIMAP%20Hack%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1928601%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Team%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20new%20to%20this%20community.%26nbsp%3B%20My%20issue%20is%20with%20Office%20365%20Family%20Plan.%26nbsp%3B%20This%20is%20NOT%20a%20business%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%2020%20year%20old%20email%20was%20hacked%20using%20IMAP%20when%20they%20brute%20forced%20my%20password.%26nbsp%3B%20I%20was%20not%20aware%20that%20this%20was%20going%20on%20because%20Microsoft%20did%20not%20send%20me%20any%20notifications%20of%20failed%20log%20in%20attempts%20via%20IMAP%20protocol.%26nbsp%3B%20Please%20see%20logs%20for%20the%2018%20showing%20that%20a%20successful%20synch%20was%20completed.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20called%20office%20365%20support%20but%20they%20had%20NO%20clue%20what%20I%20was%20talking%20about.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20used%20every%20security%20measure%20like%202%20form%20authentication%2C%20email%20recovery%2C%20etc....unique%20passwords...changing%20password%20every%20so%20often....%20I%20NEVER%20GOT%20an%20alert%20that%20hackers%20were%20trying%20to%20break%20my%20password.%26nbsp%3B%20I%20have%20copies%20of%20logs%20showing%20hundreds%20of%20attempts%20to%20get%20my%20passwords%20cracked.%26nbsp%3B%20This%20happened%20for%204%20months%20straight%20until%20they%20got%20in.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20catch%2022%20is%20that%20hackers%20got%20in%20via%20simple%20IMAP.%26nbsp%3B%20They%20had%20my%20username%20and%204%20months%20to%20break%20my%20password.%26nbsp%3B%20I%20saw%20the%20activity%20logs%20and%20realized%20how%20they%20got%20it.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20frustration%20is%20why%20I%20CANT%20request%20to%20turn%20OFF%20IMAP%20on%20my%20account.%26nbsp%3B%20THIS%20MEANS%20that%20EVERY%20non-business%20account%20can%20be%20hacked%20via%20IMAP%3F%26nbsp%3B%20This%20is%20crazy....%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20one%20at%20tech%20support%20is%20able%20to%20help%20me.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eany%20idea%20as%20to%20why%20Office%20365%20Family%20plan%20is%20not%20protect%20for%20IMAP%20hack%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECesar%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1928601%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ehack%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIMAP%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

Hello Team,

 

I am new to this community.  My issue is with Office 365 Family Plan.  This is NOT a business account.

 

My 20 year old email was hacked using IMAP when they brute forced my password.  I was not aware that this was going on because Microsoft did not send me any notifications of failed log in attempts via IMAP protocol.  Please see logs for the 18 showing that a successful synch was completed.  

 

I called office 365 support but they had NO clue what I was talking about.

 

I used every security measure like 2 form authentication, email recovery, etc....unique passwords...changing password every so often.... I NEVER GOT an alert that hackers were trying to break my password.  I have copies of logs showing hundreds of attempts to get my passwords cracked.  This happened for 4 months straight until they got in.  

 

The catch 22 is that hackers got in via simple IMAP.  They had my username and 4 months to break my password.  I saw the activity logs and realized how they got it.  

 

My frustration is why I CANT request to turn OFF IMAP on my account.  THIS MEANS that EVERY non-business account can be hacked via IMAP?  This is crazy....

 

No one at tech support is able to help me.

 

any idea as to why Office 365 Family plan is not protect for IMAP hack?

 

 

 

Cesar

0 Replies