Windows 10: My account got hacked and 2 auth was enabled

Hello My account got hacked i have no access to the account i got single use code email and it told me if i didn't send that i can ignore it, after couple of minutes i checked my emails to find that he got access, i had 2 auth btw i rushed in to sign in but it was too late, the hacker removed my 2 auth and change it to them and changed the password, this account is important to me i contacted microsoft but they couldn't do anything i am genuinely surprised that a big company like this can't recover an account if it was 2 auth enabled that is soo bad i hope they change it is there any a

:)

 

77000 Steam accounts hacked every month

Ironically I've had the same crappy password since I made my Steam when HL2 came out and never been hacked, but I've had my Origin account jacked twice with a much more complicated password. 2 step on Origin fixed this problem, but just thought it was kind of funny. I went with 2 step on Steam to be safe too.

 

Malicious access to account even though 2 way auth is enabled

Thanks for the long reply and tips.

Still the question remains even though my computer would be infected (which I serioualy think is not infected):

How is it possible that someone is using my account from unkown IP even though 2 way auth is enabled.

Please provide technical details on how this even could be possible. If it is possible them my trust on MS 2 way auth is fulle gone.

 

77000 Steam accounts hacked every month

well i have a complex password and i don't use a 2 step authentication, never had any problems on any services (steam uplay origin GoG or any mmo) "knock on wood"

i suspect the issue is only PEBCAK i.e.: weak and easy to find pass or "unsafe" sharing or sometime answering to a mail that ask you about your IGN and pass ... (i.e.: blizz B.net reccurent mail i get in my mailbox about world of warcraft or Diablo III ... i find them highly retarded most of the time and feel sad for the people who attempt that kind of scam ) or eventually related to internet behavior (key-logger shady sites that offer cheat, items, golds and power leveling ) i do nothing of that list... so i am "safe"

ofc it can also happen out of pure luck from the hacker like that example.

if i have to use a 2 step i would rather use a physical keychain (like the one i have for Battle.net and SWTOR tho i rarely use them now) than a smartphone app ... you change the phone while forgetting to remove the auth and poof : mildly screwed for some time *Laugh :laugh: