[meowimacathahameow]

friend of mine cracked a bunch of microsofts/outlooks and I am attempting to check their onedrive for educational purposes. I keep getting hindered with the message
""
We have detected unusual activity on your Microsoft account ****@gmail.com, or believe your credentials are at risk.
For your security and to ensure only you have access to your account, we will ask you to verify your identity and change your password.
""

is there any known bypass for this? I do know which city each email is from and ect would resi proxies in their same area work?

[holofernes]

yes, if you are accessing a Microsoft account from an IP address that has a large amount of geographical distance between you and the last logon, then it will trigger an alert. This is the simplest way that Microsoft determines if a login is authentic. A proxy could help, but if you're using a known malicious proxy (mullvad often falls into this category) or some other cheapo proxy, you could get flagged for that as well. If you have Microsoft account access then you need to act fairly quickly and consider either locking the user out of the account or moving laterally if the account is part of an institution.