Installed Bit defender and Malware bytes on the phone - both gave the all clear, added two step auth on my microsoft acc. which I certain to regret soon enough :|

I've been getting two of those in the last week, coming from my wife's Skype account. Only, she hasn't used that account for years, and I don't think it's even active on any of our devices any more. Perhaps the accounts sending these messages have been hijacked?

Quoting: kaimanI've been getting two of those in the last week, coming from my wife's Skype account. Only, she hasn't used that account for years, and I don't think it's even active on any of our devices any more. Perhaps the accounts sending these messages have been hijacked?

The official stance from microsoft is that 3rd party have obtained the email/password because you've used it on other sites aswell.

Now granted my email is found in a few leaks as confirmed by https://haveibeenpwned.com;

adobe
gpotato
Unreal engine
antipublic ( dupes of the above )
Exploit.In ( same )

As all of the above leaks have been made accessible via torrents I know for a fact that none of them used the same password as I use for my microsoft account.

It's of course possible that they cracked the password through other means, but I would think they would have been more creative with the possibilities - especially given that there was potential for creditcard fraud.

Even so I've added 2-step auth that way if/when it happens again at least I have proof that they are wrong ;)

If you wife does not use her account you should delete it and/or add 2-step

Would be curios how they got in , in the first place.
Do you mind me asking what service was the email on ?

It's probably worth thinking outside the box - For instance, maybe the hacking is on your router, and that is the attack vector instead.

Aaand it happened again - this time atleast I discovered it rather fast because the translated replied that I needed to add more people to the converstation :P

So it seems that two factor auth is not a solution here :(

Spendt way to long talking to MS support -.-'

Aparently even though I sign into my skype account using the same email and password as my microsoft/live/xbox account they are in no way linked* - you need to create a NEW microsoft account and link you skype account to it and enable 2FA for that.