Microsoft scams just got .... creepier

A tech friend of mine claimed once to have a program he'd downloaded that if someone tried to connect to his machine via hacking, that it would place a bomb on their system that would format their drive. Never saw it.
 
A tech friend of mine claimed once to have a program he'd downloaded that if someone tried to connect to his machine via hacking, that it would place a bomb on their system that would format their drive. Never saw it.

No bomb, just spike them!
270
 
Sort of a newb, so sorry if this sounds stupid, but I hear this alot. Any idea of how they're doing this? I get clients with this all the time, whats scary is they're all literately few miles of each other in some cases blocks away!
 
The first thing I usually tell my customers is that companies like Microsoft have no interest in calling residential customers and extremely small business customers like us. The second thing I tell them is to simply hang up the phone. I also direct them to the FTC's website (https://www.fcc.gov/guides/caller-id-and-spoofing) concerning caller ID spoofing, especially if their caller ID is showing a US number.

Regarding the hanging up, I just had one of my customers that got scammed late last year. She is on our new monthly maintenance and support plan and has no need for anyone other than us. However, she would rather allow them access to her computer and keep telling them that she isn't paying for anything instead of simply hanging up. Then she calls me lol.
 
I have about 1 customer a month that brings in a machine that these guys have invaded. I appreciate the business but I also like to educate my customers on how to avoid these traps. It is difficult to pre-warn folks in a way that they pay attention (they always pay attention after I do a repair) but I have been giving it some effort. This new invasion plan - how in the world can we help them fight this?

On another note, I had a customer recently that told one of these guys that she worked for NSA and that she could "see" him. He hung up.
 
Since I registered my website I have a couple of calls from "Microsoft Support" , I laughed at them and hung up after they didn't believe I wasn't running a Non windows server! I didn't realise that they can get your contact details from registering for a site!
 
They are scum, but what really makes me angry is when they do it to elderly people. :mad:

We are also getting scammers pretending to be from someone's broadband company (so far pretending to be a company called TalkTalk in the UK) and as there are so many customers around, they get a result quite often. My customers have said "well they know we're on their broadband, so it must be them".

I've warned people in a monthly computer article I do in a local paper, but they still get scammed. :(
 
I had one the other day, client was woken up at 8:00am by supposedly Visa fraud department. For some reason wanted access to her computer and she let them. They were using TighVNC that had an admin password on it. Not the same as the Microsoft scam but malicious just the same.

Edit...forget to mention client was elderly.
 
They are scum, but what really makes me angry is when they do it to elderly people. :mad:

We are also getting scammers pretending to be from someone's broadband company (so far pretending to be a company called TalkTalk in the UK) and as there are so many customers around, they get a result quite often. My customers have said "well they know we're on their broadband, so it must be them".

I've warned people in a monthly computer article I do in a local paper, but they still get scammed. :(

I've got a client who was scammed by the talk talk peeps, twice this week alone!.

First time he was told, we've noticed errors with your broadband. We will credit £400 into your account, then take £200 back out of it.

All we need are your bank details..

His wife was just about to hand them over, when he rings me. Obviously I tell him to put the phone down, and bring the machine into me.

I give the machine a going over yesterday, when again today, they are contacted again by talk talk.

This time she put the phone down.

I'm waiting for all the other ISP scammers to do the rounds next.
 
Orchestrate your own MITM attack on your own network that sniffs the packets that go from your VM to the "Microsoft support" VM. Grab the IP, book up metasploit and just launch all possible attacks at it and see if there are any exploits. Open up meterpreter, go into DOS and delete system 32.
Or install a RAT (Blackshades, anyone?) and see if you can configure their PBX to redirect all calls to phone sex lines.
**** their **** up. What else can I say.
Sure, it's illegal, but what are they going to do- sue you?
 
What about setting up some sort of honeypot machine loaded with viruses that we could remotely add their LMI pin into to give them access? Restore an image if they manage to **** anything up, infect their end PCs whenever possible. Give them a taste of their own bs.
 
Last edited by a moderator:
Back
Top