Bogus Support Organizations use Live Operators to Install Malware

Published: 2010-07-06
Last Updated: 2010-07-06 18:58:20 UTC
by Rob VandenBrink (Version: 1)
1 comment(s)

Drew, one of our readers, wrote us let us know about a new scam being used to spread malware - - well, ok, not so new, but certainly new to me and becoming more popular, enough that it should be on your radar.

Picture this - you're surfing away, and your phone rings.  A person claiming to be from a support company or in some cases a "Registered Microsoft Support Partner" (note that Microsoft does not use this term, it's a made-up designation) tells you that you have a virus, and that for a few hundred in your favourite currency, they'll clean your computer for you.  Of course, if this happened as a pop-up, you'd know it was a scam right?  maybe?  Your Antivirus might catch it, but if not, you'd probably close the window, or perhaps reboot your computer.  But would you fall for the live operator on the phone?  Would your parents, grandparents or other relatives?  How about your manager? your CEO? 

The attackers in these schemes have nothing but time to help you to install malware, remote desktop applications or really anything they feel would make their life easier.


After digging a bit, some of these scams seem to be run from locations in India (but most likely not all of them), but when they call your phone, they'll most likely have an area code in your country.  They also take advantage of VOIP services to keep their costs low and profits high.

There is no good protection against things like this except for user education in security awareness.  Especially in corporations, this should be an ongoing effort, and things like phishing, vishing, fake antivirus and the like should be presented to your user community for what they are as frequently as possible. 

More info here ==> http://www.pcpro.co.uk/news/security/359233/the-unstoppable-tech-support-scam

and here ==> http://www.pcpro.co.uk/news/security/356833/pensioner-targeted-by-fake-virus-phone-scam

 

=============== Rob VandenBrink, Metafore ===============

1 comment(s)

Comments

cwqwqwq
eweew<a href="https://www.seocheckin.com/edu-sites-list/">mashood</a>
WQwqwqwq[url=https://www.seocheckin.com/edu-sites-list/]mashood[/url]
dwqqqwqwq mashood
[https://isc.sans.edu/diary.html](https://isc.sans.edu/diary.html)
[https://isc.sans.edu/diary.html | https://isc.sans.edu/diary.html]
What's this all about ..?
password reveal .
<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure:

<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure. The social networks are not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go.

<a hreaf="https://technolytical.com/">the social network</a> is not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go. The social networks only collect the minimum amount of information required for the service that they provide. Your personal information is kept private, and is never shared with other companies without your permission
https://thehomestore.com.pk/

Diary Archives