Windows 10: Assistance with Repeated Login Attempts and Email Spoofing

Dear friends @Don VarnauI am a personal account user of Microsoft Outlook and have noticed persistent failed login attempts on my account for over a year. Although I have 2FA enabled and my account has not been compromised, I am concerned about the security of my account as these attempts seem to originate from VPNs or proxies worldwide.Additionally, I received a spoofed email that appears to have been sent from my account but did not originate from me. I have reviewed the email headers, which indicate that the sender's IP is unrelated to Microsoft's servers.I kindly request your guidance or

:)

 

spoof email

I received an email supposedly from a contact indicating it was from Joe (not real name). On opening it, it was obvious it was a spoof. Needing to let Joe know about this I realised he wasn't in my "Mail" contacts list, but he was in my Thunderbird contacts
list. I opened "Thunderbird" and informed him. Whilst I had Thunderbird open I decided to trace the ip route of the original email. That was when I found that Thunderbird had recognised it as a spoof and had sent it straight to my spam folder and had also
removed the spoofed "from Joe" header in my inbox column, replacing it with the real sender. My questions are why can Thunderbird differentiate a spoof and Mail for windows can't. Was the
"Fw: for all" in Mail spoofed from my email or Joe's as we are a group, and that is the usual header that only Joe uses?

Regards Rob

 

e-bay Spoof Email Alert

Just a heads up for anyone receiving an email allegedly from eBay.

I received a spoof email today from "e-bay <member@e-bay.co.uk>" with the subject "eBay System Update: Identity Confirmation"

If you receive this email delete it immediately and dont click on any links in the mail.You will notice that e-bay is hyphenated and not the proper eBay address.

This has been confirmed by eBay to be a spoof email.

 

Another... Peculiar (spoofed) Email...

In this day and age I shouldn't find this surprising as the ingenuity of some users shows no bounds. If they could only put their resourcefulness to benevolent instead of malevolent efforts the world's problems would be solved in a month. Okay, six months, but I digress.

There hasn't been many, maybe four since the end of Summer but I receive emails that are no where close to my addy. In the accompanying attachment I changed my address to all capital X's with the provider in lower case x's, my address shows up three times in the original message.
The address this email was originally spoofed from is s....k33 at mail dot ru which is shorter by three characters and does not contain any corresponding characters except for the at and dot symbols.

I have checked the pwned site and yes my addy is listed but over the years I really don't receive a lot of spam maybe one a month. This one is the first since November.

• I have marked the email as phishing but couldn't block the sender because that action wasn't available probably another symptom of spoofing, how do you block an address that doesn't exist? I did send an abuse report to my email provider.
• Do I send an abuse report to admin at actonalumni dot org the sender? Maybe that doesn't exist as well.
• The rotrax dot websitewelcome dot com (the man in the middle) addy throws a 404 error and when you search for rotrax dot com it's for sale by HugeDomains dot com, now isn't that surprising!

Such a PITA!

@Infrasonic;'s reply in @FrankS's thread explains this well:

If you need more do a search for spoofed emails. I just wanted to put my experience out here as another example.

Another Peculiar Email.txt

p.s. I marked my thread solved, but for now there really is no way to stop it.