Suspicious account activity

[KSTinMB]

I rarely use my ages old hotmail account, but I do have it set up for POP access from my PC - Windows 10, with Outlook 2010, so it's is poked at least once a day.


I received a notice of suspicious activity and when I checked the log, I found:


Device/platform Windows

Browser/app Firefox

IP address 185.240.246.124

Account alias *** Email address is removed for privacy ***

Session activity Unusual activity detected


and


Protocol: Exchange ActiveSync

IP: 41.217.72.75

Account alias: *** Email address is removed for privacy ***

Time: 2 hours ago

Approximate location: Nigeria

Type: Unusual activity detected


The account had a long, unique, unguessable password (which I have since changed) not used elsewhere and I use a password manager, KeePass.


How is this possible?
What is the "unusual activity" captured with Firefox?
How was Exchange ActiveSync used without my password?

I am very cautious and conscientious about my passwords and am comletely puxxled.

Thanks,
Old Man in SC

Continue reading...