Tryna gauge how doable it’ll be for her. She had 50 viruses because of carelessness and all her accounts got compromised, we got her email back but not her valorant.
Any advice would be appreciated!
Edit: solved! I had email and sms notifications turned on for account verification but 2fa was not on. It has been enavled. And the password has been changed!
Alright, here's what i'm suspecting
Account used a password i've known to have been leaked for a year now, but could never change it because microsoft would block me from logging in for "suspicious activity" though this one's got no personal info.
Now, there were three seperate logins all at the same time. Same old, vietnam, mexico, yada yada. Only one had device information.
Now i'm wondering, how did i not get a notification about this? I had 2 step enable to send a code to;
my email, which i carefully checked and was not compromised.
My phone.
I ended up getting the security notification on my phone about hte suspciious logins, 2 hours after they had happened.
I am currently on a fresh pc, only things i've got installed are steam games, curseforge and the hoyoplay and Neverness to everness launcher. Also malwarebytes because... You never know.
Tl;dr: microsoft account got got, password was leaked for like a year but couldn't change it cause microsoft kept blocking them for "suspicious activity". multiple logins at the same time, vietnam, mexico, the usual. somehow bypassed 2FA which was set to email + phone. only got the security notification 2 hours after the fact. currently on a fresh pc with minimal stuff installed + malwarebytes just in case.
That is all! i'm sorry if this isn't allowed.