customer fell for tech support call

  • Thread starter Thread starter Todd
  • Start date Start date
T

Todd

Hi All,

I had a customer call and told us that she had taken
a phone call from someone that said they were from tech
support and needed to check their computer out. She
fell for it as she had been dealing with some other
tech support and got the fraudsters mixed up with
them. She let them log in and poke around. She
wised up when they wanted to charge he credit card
$200.00 to fix her computer.

I will run a full, deep virus scan on her to make
sure she is okay. Plus look around myself.

Do you guys know if this scheme is just to steel your
credit card or do they also drop some crap on your
computer?

Many thanks,
-T
 
Todd said:
Hi All,

I had a customer call and told us that she had taken
a phone call from someone that said they were from tech
support and needed to check their computer out. She
fell for it as she had been dealing with some other
tech support and got the fraudsters mixed up with
them. She let them log in and poke around. She
wised up when they wanted to charge he credit card
$200.00 to fix her computer.

I will run a full, deep virus scan on her to make
sure she is okay. Plus look around myself.

Do you guys know if this scheme is just to steel your
credit card or do they also drop some crap on your
computer?
Click to expand...


They can and have done both in the past. They can install malware,
steal credit card info and passwords, install keyloggers, trojans and
root kits.... pretty much anything if they were allowed to log onto an
admin profile.

At the very least, do a full scan with Malwarebytes AntiMalware (MBAM),
after doing a malware scan from outside Windows, from a CD or USB boot
using a Linux-based rescue disc like Kaspersky Rescue CD or BitDefender
Rescue CD.

The client should change passwords on the computer and at web sites,
especially any banking or credit card sites, PayPal, etc. just to be
safe.

Have them report the call here:
https://isc.sans.edu/reportfakecall.html
 
They can and have done both in the past. They can install malware,

steal credit card info and passwords, install keyloggers, trojans and

root kits.... pretty much anything if they were allowed to log onto an

admin profile.



At the very least, do a full scan with Malwarebytes AntiMalware (MBAM),

after doing a malware scan from outside Windows, from a CD or USB boot

using a Linux-based rescue disc like Kaspersky Rescue CD or BitDefender

Rescue CD.



The client should change passwords on the computer and at web sites,

especially any banking or credit card sites, PayPal, etc. just to be

safe.



Have them report the call here:

https://isc.sans.edu/reportfakecall.html

--

Glen Ventura

MS MVP Oct. 2002 - Sept. 2009

CompTIA A+
Click to expand...

Thanks for the info.

Andy
 
Hi All,

I had a customer call and told us that she had taken
a phone call from someone that said they were from tech
support and needed to check their computer out. She
fell for it as she had been dealing with some other
tech support and got the fraudsters mixed up with
them. She let them log in and poke around. She
wised up when they wanted to charge he credit card
$200.00 to fix her computer.

I will run a full, deep virus scan on her to make
sure she is okay. Plus look around myself.

Do you guys know if this scheme is just to steel your
credit card or do they also drop some crap on your
computer?
Click to expand...


It can be either or both. Not all scammers who do this are the same.

I recommend that you do *not* rely on "a full, deep virus scan."
Besides their getting money from you for doing nothing of any value,
if she let them into her computer, who knows what damage they did
there or what confidential information they stole.

So since she did, I highly recommend that she (or you) do both of the
following immediately:

1. Do a clean reinstallation of Windows.

2. Change all of her passwords, especially any for banks or other
financial sites.
 
On Wed, 30 Jan 2013 09:05:15 -0700, "Ken Blake, MVP"
It can be either or both. Not all scammers who do this are the same.

I recommend that you do *not* rely on "a full, deep virus scan."
Besides their getting money from you for doing nothing of any value,
if she let them into her computer, who knows what damage they did
there or what confidential information they stole.

So since she did, I highly recommend that she (or you) do both of the
following immediately:

1. Do a clean reinstallation of Windows.

2. Change all of her passwords, especially any for banks or other
financial sites.
Click to expand...

+1

And while she is at it, notify the banks and credit card companies and
put a fraud alert on any of her accounts she used or accessed with that
computer.

--
Zaphod

Arthur: All my life I've had this strange feeling that there's
something big and sinister going on in the world.
Slartibartfast: No, that's perfectly normal paranoia. Everyone in the
universe gets that.
 
Hi All,

I had a customer call and told us that she had taken
a phone call from someone that said they were from tech
support and needed to check their computer out. She
fell for it as she had been dealing with some other
tech support and got the fraudsters mixed up with
them. She let them log in and poke around. She
wised up when they wanted to charge he credit card
$200.00 to fix her computer.
Click to expand...

Terrible timing coincidence. You're dealing with real tech support, when
fake tech support calls confusing the hell out of you. I don't blame
your client for falling for it.
I will run a full, deep virus scan on her to make
sure she is okay. Plus look around myself.

Do you guys know if this scheme is just to steel your
credit card or do they also drop some crap on your
computer?
Click to expand...

They often do install malware, but I think that usually happens after
they get your credit card info. But you should ask your client whether
they asked her to allow permission to do anything on her computer.

Yousuf Khan
 
She "should" have requested more information to qualify and vet the
caller. Therefore, she does have blame.

People must use Critical Thought to thwart Social Engineering which is
the human exploit.
Click to expand...

True. But, remember you would not have much of a career
as a criminal if you did not have an honest face. (It is
a play on words.)

And, I have given up telling people they should use Linux,
preferably off a live CD, to do on line banking. It is
so foolish to use Windows for private stuff. Yet
try and stop folks. (I do no on line banking. Perplexes
my bank, but they live with it.)
 
I had a customer call and told us that she had taken
a phone call from someone that said they were from tech
support and needed to check their computer out. She
fell for it as she had been dealing with some other
tech support and got the fraudsters mixed up with
them. She let them log in and poke around. She
wised up when they wanted to charge he credit card
$200.00 to fix her computer. . . .
Do you guys know if this scheme is just to steel your
credit card or do they also drop some crap on your computer?
Click to expand...

Fake calls like this began at least three years ago. So IT
professionals should know by now this common scam merely
exploits one of the cosmetic ornaments of WinXP and later
MS operating systems.

/Administrative Tools / Event Viewer / points to logs of
malfunctions during normal operation. Those classified "Error"
are ornamented with a scarlet blob with superimposed white
X, and "Warning" with the familiar yellow triangle with black !

Naive (normal) users do not know that all Windows PC frequently
log errors like this without functionality ever being impaired.
When they.see for the first time the long series of these
alarming red and yellow markers, users may be easily persuaded
they need to pay an expert to "fix their computer." Most fake
callers use this alarm to sell AV software or bogus
services. (They may or may not also harvest credit card
information for resale to professional thieves.)

The initial warning signal is that the caller purports to
represent either Microsoft Corp. or the employer's IT
department. This is easily verified, and nearly always turns
out to be a lie.
 
Back
Top