Account take over algorithm

Yoitsfloyd · Feb 16, 2023

Hi, I I'm a gamer and cyber analyst I'm sure you have seen me around the forums trying to help gamers and customers on why they have an unidentified email address on their account for no reason. For Example, I have seen the following take overs: rambler.ru 90% of the time and MCMFA domains 40% of the time. Furthermore, my questions are to the agents and engineers who work in account security, here are questions to you.

Rambler.ru take overs: knowing that it is a trojan and virus that steals anything and everything on the computer why can a gamer and or customer of your products not recover their accounts when this occurs? even if the owner knows every single piece of information about their account it either gets suspended or they leave it alone why is this? same thing with MCMFA

2fa- Why do you guys need our phone numbers for 2 factor authentication? Sim swapping is becoming dangerously common. And there are tools out there for cheap prices that can grab your 2fa code from the unsecure SMS channel and log in. Is it possible to use 2 heavily secured emails and security keys without a phone number? this would reduce sim swapping heavily.

recovery forum- for some odd reason when I have seen instances where a person provides enough information to the forum, but it still rejects them leaving them stranded and being told nothing can be done regardless of having information the owner would only know and not the bad actor also why is it an offline forum?

Algorithm- 20 years and it's fallen behind but how?

:)

Yoitsfloyd

True I guess I was told false information

ngocphi

No it can't be changed

I don't think you realize the issue

Original info is info from account creation NOT new ms account info this is from the offline team

And yes I have helped people.with the form

The more info and loged devices are important

So if you have a previously logged in device that Mac address is important

Throwing up random info into more info won't help unless it's actual info the account owner should know thats phishing

And yes there is info that owners should know that isnt available to the public

It's not a ai that sees the form it's an actual agent who reads the form.

Yoitsfloyd

I’m am not part of Microsoft in anyway, I’m independent. but I am aware you have to provide original info however, if the original info is changed regardless if they know it or not even if they know the original (pii) Personally Identifiable Information it still is declined and if it’s escalated they end up suspending it. Idk if you know but Microsoft follows a zero trust policy in account security, their are articles of customers and gamers getting past the forum and they provided (EVERYTHING) with the right information but once again there account ends up suspended or they are ended up told to make a new one. I was told because of the security information being changed

Yoitsfloyd

Got it, I’ll keep that in mind thanks! I’ve been told different things and sometimes the same thing. But great information

ngocphi

Security info means like recovery options NOT COre info

So if you are trying to bypass the form by attempting to use security proofs it's a security check not a hole that's where you are getting the error

Using outdated security proofs is bad and is a security risk it's like using an old password and expecting some random anonmymoua database buyer to.be able to reset yoir info

Security is a two way job

Info must.be kept upto date this includes passwords which we all.know is the weakest link as password or 1234567890 or commonly used passwords are the real security threat

Even chrome or edge will warn you if you use old passwords that are known

Account take over algorithm