Someone recently sent emails from a third-party email address (spoofed to look like me) to a number of contacts of mine.
The only place that contact list the email drew from could have come from was from my outlook.com contacts, so I suspect my outlook.com account has been accessed in some way.
It's important to know how the hacker got access to my contacts. If it was a cookie/XSS attack, then just changing my password, etc. (which I've already done) will take care of it. If it is malware, I may need to re-install my PC if anti-malware software can't find and fix it. It ~feels~ like a cookie/XSS attack since my outlook.com account password was not changed and the emails weren't sent from my account, which would have caused them to pass more spam filters.
I looked at my recent account activity at:
and I saw a number of logins over the past month from my home IP address with these details:
Device/platform: Windows Browser/app: Internet Explorer
I don't use Internet Explorer, and one of the logins was at 3 am, which is unlikely to have been when I was accessing my PC. I do have my Windows 8 password sync'd to my live.com account, which might explain these random logins.
Can this account activity be explained by Windows 8 waking up in the middle of the night, or is it a definite sign of malware if I wasn't at my keyboard when the event happened? Does Windows 8 login show up as Internet Explorer in the account.live.com/activity page or is it definitely Internet Explorer that logged into my account?