Is my computer hacked, or something?

[usonian]

3. Every bit of that sounds phony, including, and maybe especially the Microsoft message.

Solution? Well, let's ask the internet (DuckDuckGo search on your complaint) This usually works!

Search for

"Microsoft account
Security info was added
The following security info was recently added to the Microsoft account am**[e-mail]:
Passkey
If this was you, then you can safely ignore this email.
If this wasn't you, a malicious user has access to your account. Please review your recent activity and we'll help you secure your account."

Yup, the whole thing,

Results:

https://www.pcrisk.com/removal-guides/28567-security-info-was-added-email-scam

How to identify fake emails like "Security Info Was Added"
Phishing/Scam
Also Known As: Security Info Was Added phishing campaign

More about the "Security Info Was Added" scam email

This email claims that security information has been added to a Mail account. It includes a message suggesting that if the recipient recognizes this action, they can safely ignore the email. However, if the recipient did not authorize the addition of security information, it warns that a malicious user may have gained access to their account.

The email encourages the recipient to review their recent account activity and offers assistance in securing their account. Additionally, a link is provided to "Review recent activity" and an option to opt out or change preferences for receiving security notifications.

The hyperlinks within this email lead to a deceptive webpage designed to replicate the login interface of the recipient's email service provider. For instance, if the recipient utilizes Gmail, the phishing page mirrors the appearance of the Gmail sign-in portal. In either case, the primary objective of this fraudulent page is to obtain the login credentials for the email account.

Once scammers obtain email account login credentials, they can hijack an email account to launch phishing attacks on the victim's contacts. Additionally, scammers may use the stolen email credentials for identity theft or unauthorized access to other online accounts associated with the victim.

Moreover, stolen email accounts can also be sold on the dark web, contributing to a broader black market for compromised credentials. In this illicit trade, cybercriminals buy and sell access to hacked accounts, exacerbating the potential harm to individuals and organizations.

https://malware-guide.com/blog/understanding-the-security-info-was-added-email-scam-a-deceptive-threat
Understanding the Security Info Was Added Email Scam: A Deceptive Threat
December 18, 2023

Security Info Was Added Email Scam Outline

In the digital world, there’s a sneaky scam known as the Security Info Was Added Email Scam. This trickery aims to fool people into sharing their personal information on a fake website. The scam arrives as an email, pretending to be a notification from your email service provider.

The email claims that some security info was added to your email account. It says that if you know about this, you can ignore the email. But if you didn’t authorize this security addition, it warns that a bad actor might have gotten into your account. Tricky, right?

To make things worse, the email urges you to check your recent account activity and offers to help secure your account. There’s a link tempting you to “Review recent activity” and an option to change your preferences for getting security notifications. But be cautious!

Here’s the catch: If you click on these links, they take you to a fake webpage. This page looks just like the login page of your email service provider, like Gmail. But, surprise! It’s a trap. The main goal of this fake page is to snatch your login details – your username and password.

Once the scammers have your login info, they can take over your email account. They might use it to trick your friends with more scams or even steal your identity. And it gets scarier – stolen email accounts can be sold on the dark web. In this secret online market, cybercriminals buy and sell hacked accounts, making the problem bigger and scarier for everyone involved.

So, the lesson here is to stay alert and be careful with unexpected emails. Don’t rush to click on links, especially if they’re asking for your personal info. It’s always good to double-check and make sure you’re not falling into a sneaky online trap.