thanks for this, i couldn't figure out months ago how could be my Microsoft account compromised despite using 2FA, seem after this hack and resetting all of my security settings they removed ability to sign in with old Skype account since when i went to check it now it was already unchecked

though i still see in recent activity unsuccessful attempts for IMAP synchronization from all over world, not sure if they are trying to use some old app password, which i reset after discovering have