Getting multiple one-time code request emails. Trying to understand which API or product the attacker is trying to gain access to.

[Guest ixpro]

1. Received multiple single-use code requests via non-MSN email associated with the account.2. Just to be safe I have changed the primary email associated with this MSN account to another address protected by MFA.3. Immediately started receiving single-use code requests in my new mailbox. How is this possible, doesn't MS provide only a partial view of the email and the end user is supposed to provide the full match?Question:I do know how to go into account security and view recent activity. I am seeing multiple failed sign-in and account sync attempts from all over the globe, I guess the work

 

Continue reading...