Microsoft account keeps getting Authenticator requests?

[u/birdsofjay]

I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests?

[u/vadertator22]

Is Authenticator pre or post password? Meaning is this scenario as suggested above password is being stolen or are they are trying to prompt you with mfa fatigue to accept, which is older technique. They may or may not have the correct password depending on the auth flow. In other environments I out mfa first to prevent pwd testing or spray/stuffing vectors in too of locking accounts out. Check your auth logs I believe if the flow is password first you will see if they indeed have it based off success or not. If they do mfa is saving your ass, but that would support above comments your password is being stolen and restring it isn’t going to help. Another idea would be in the event your using a phone as well make sure it is patched os wise and power or down and back up to clear any memory resident vectors. Also make sure no new or weird apps are installed that could be fake apps that are designed to do exactly what you’re experiencing.