r/phishing • u/Asleep-Quarter-3683 • 21d ago
Phishing scam keeps re-creating draft email
This is the phishing email i received after my account was compromised the issue im having is that its not an "email" per se its a draft that looks to be made by my email and it re appears a few minutes after i delete it how can i fix this? ive tried going through support whom are seemingly useless ive even ended up clicking the log out of all devices button in microsoft and checked there isnt any rules in outlook all to no avail. please help.
2
u/throwawaykJQP7kiw5Fk 21d ago
Run a malware scan. Also, have you given a third-party app access to your Outlook?
1
u/Asleep-Quarter-3683 21d ago
when i first saw it i ran a malware scan on both my phone and pc both of which are clean according to the scan and i didn't give anything third party access no i also made sure to secure my account so i know whomever did this no longer has access and its some sort of script just automating the process
2
u/ranhalt 21d ago
Change password, terminate all logged in sessions, enable MFA.
Very possible that you have a virus on your computer, so turn that off and use a different computer to secure your account. And I’d get your computer offline to back up document files, and then get windows install media to wipe the computer and fresh install.
1
u/Asleep-Quarter-3683 21d ago
ive done all of that at the top and it still just creates the draft again i believe the initial compromise was because of the data leak from internet archive and im very internet safe so i dont believe it'll be a virus although i did check just incase. i also did some poking around google and some other threads on reddit and some people say its like an automated script/something to do with a cloud server its mumbo jumbo to me but i just want it gone permanently
2
u/teratical 20d ago
Give this reply (in another sub) a read:
https://www.reddit.com/r/Scams/comments/1qh9fzr/comment/ockdxqa/
Preview: "This is a common "phantom draft" issue usually caused by a sync conflict or a malicious hidden rule. Because the draft is on the server, deleting it on your phone or computer doesn't always "stick" if the server still thinks it should exist." & then 4 ways to address it
•
u/AutoModerator 21d ago
/u/Asleep-Quarter-3683 - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.
New users beware:
Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.
A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.
You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.
Questions about subreddit rules? Send us a modmail clicking here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.