I have received several emails from "the Microsoft Account Team": some stating that someone attempted to login to my account from Moscow/Russia, and this one saying someone attempted to change my password. I checked my account security, but it didn't show any suspicious login activity. I've changed my password twice, since these emails started, and logged my Outlook account out of my email client (which is inconvenient, but not as inconvenient as being hacked). A long-press on the links brought up the following:
*** Email address is removed for privacy ***?subject=unusual sign-in activity&body=Yes It was Me
*** Email address is removed for privacy ***?subject=unusual sign-in activity&body=No It was not Me
Even though the email address looked feasible, the links look bogus.
Please weigh in on this