OVH account hijacked and attempting to pay

admin

What is even stranger, someone logged into my OVH account at midnight and placed an order for $0.99... I don't know what it was, but the order was blocked by OVH.

What's more worrying is that both logins were using unknown IP addresses. Did OVH not check login IP when anyone could access the account with just a password? Thankfully they didn't make any changes to my VPS after logging in.

However, thinking about it carefully, the password hasn't been changed for over three years and I used a weak password without enabling two-factor authentication. That definitely poses some security risks. So I immediately changed the password and enabled two-factor authentication.