Friday, February 1, 2019

My call with a Fake Apple Support scam 1866–5O6–67O9

I purposely fell for this scam so you don’t have to...



As I Call on 1866–5O6–67O9, I could hear voices in the background and envisioned a large room full of “support advisers” carefully reeling in dozens of potential scam victims. How many, I wondered would end up duped?
The support adviser asked about my Web browser and then told me to find my search bar, clear it out (again, I let him guide me, so I seemed like I knew something, but not a lot, about technology) and then type in this exact phrase: “establish support connection with apple.”
I asked him to hold on as I was typing slowly. In reality, I was opening an incognito Web browsing page for a bit of added security.
“I’m on my Windows computer. Will you still be able to diagnose my Apple devices through it?”
“Yes.”
I typed in the phrase “establish support connection with apple.” The first result was, “Establish Support Connection — GoToAssist” from FastSupport.com. I clicked the link and landed on a surprisingly Austere page. On it was just two text-entry boxes and a large blue “Continue” button.
“This doesn’t say Apple,” I told the Support Tech. “Is Fast Support owned by Apple?”
“Yes,” the support adviser lied.
I hit continue and watched as it downloaded GoToAssist install file.
“It downloaded a file,” I told him.
“No, no, it just wants to connect to your computer.”
“No. There’s now a file here on my PC. Will it harm my computer?” I asked, trying to sound a little nervous and confused.
“No.”
He was right. Simply installing the app, GoToAssist, would not directly harm my PC. The software is developed by the very legitimate LogMeIn, which has been giving people (including me) remote access to their computers for decades.
I sat there staring at the file. It might have been a malware-filled executable masquerading as GoToAssist, but I was pretty sure system infection wasn’t the goal. According to other similar reports on Apple’s own, real support site, these scammers are mostly trying to identify fake problems, so they can sell useless and expensive software and warranty programs.
“Sir are you still there?” my support adviser asked.
“Oh, yes, sorry, my computer is just slow.”
I installed and soon had a screen that said “apple support” was requesting to connect to my PC.
I quickly decided that this was a step too far. If I connected to this bozo, he’d have access to my system and could basically do whatever he wanted.
He started pushing.
“Sir, connect, so we can scan your computer. It is necessary to join with the Apple session. After connecting to a secure line for Apple, we’ll get into your secure devices.”
I stalled.
“So, I have to connect so you can figure this out? I’m confused. You keep talking about a problem, but I don’t know what the problem is.”
The support adviser kept his cool and pressed on, “We’re only able to find it after we diagnose the real root cause of this problem.”
“Okay,” I said, “but you keep talking about ‘this problem’ and yet I don’t know what it is.”
The support adviser told me that there’d been 25 separate attempts from various locations to access my account.
“But if they were attempts and you rebuffed them, then you’re doing your job and I’m safe, right?”
“Sir,” the support adviser continued as exasperation creeped into his voice, “they will keep trying and eventually get your personal, private information.”
By this time, we’d been on the phone 15 minutes. I knew that under no circumstances could I establish this connection and give him control to my computer. The jig was up.
“So,” I said, “I connect to you and then you can access this computer and basically dig around for my personal private information.”
“No, sir. We’re trying to help you.”
“I have a better idea. I’ve had the FBI on the other line, listening in and recording. [A lie, but since he was lying, too, I didn’t feel too bad about it]. They’re thrilled that I kept you on the line so long and have your information and location.”
My support adviser had grown silent, but he was still on the line.
“Pack your bags and enjoy your time in jail.”

Friday, July 6, 2018

Tech Scammers

Find Tech Scammer Phone Numbers

Don't Call These Numbers: It's a Tech-Support Scam

1-866-600-0860
1-855-505-7815
1-855-999-4377

1-833-334-0433

1-800-362-6015

1-866-888-6619

1-800-371-4909

1-866-606-9282

1-888-997-3799

1-855-676-2448

1-844-891-1946

1-800-318-4042

1-877-353-1149

1-800-436-0509

1-855-718-2888

1-888-964-8356

1-877-211-2011




A tech-support-scam outfit is calling people at home and telling them that their "version of Windows has been terminated" and asking them to call a toll-free number for assistance "from Microsoft."

The phony phone number is (866) 600-0860, If you do, a man with a heavy accent will ask you to go to a website called Support88.com, then ask to you click one of three buttons on that site. Doing so will download software that gives the friendly foreign gentleman total control of your PC.
Let's be clear: Microsoft will NEVER call you at home to tell you that your Windows software is out of date. Anyone who phones your house out of the blue and pretends to represent Microsoft is a scammer, and you should hang up on them right away.

MORE:  How to Protect Yourself from Tech-Support Scams


In our own case, we got a call at home a few minutes ago. A pre-recorded female voice told us that our Microsoft services would be "terminated" and that we needed to call (844) 308-6819 straight away.
Being up for a little adventure, we did. The aforementioned Indian chap was polite and helpful, and told us that we needed to upgrade our version of Windows. (We're using Windows 10.)
He instructed us to go to the Start menu and type in "msconfig," then hit Enter. This brought up the Windows System Configuration interface. So far, all harmless.
The tech scammer then had us open the Services tab in the System Configuration interface and tell us if we saw any services in a "Stopped" state. Of course, we did, as most Windows systems will have some stopped services.
It's not clear why the scammer had us go through these steps, except maybe so that he could later claim that the stopped services were evidence of system malfunction. (They aren't.)
The scammer's next step was to ask us to type "www.support88.com" into the search window in the Start menu. This opened up the Support88.com website in the default browser. (This website is registered to a proxy service in Scottsdale, Arizona, making it hard to find the real site owner.)
At this point, we saw a nearly blank web page that read "SECURED SUPPORT CONNECTION" in block letters, underneath which were three green buttons reading "TECHLEVEL#1," "TECHLEVEL#2" and "TECHLEVEL#3."
The phony technician, whom we assume was sitting in a call center surrounded by dozens of fellow co-workers performing the same scam, asked us to click "TECHLEVEL#2." We did, and our browser downloaded a Windows executable file — an installer or application — called ShowMyPC.exe.
This was the point at which the scam went from harmless to harmful. ShowMyPC would have granted the phony technician access to our PC, which would have let him install anything. We told him he was a scammer and hung up.
MORE: Best Antivirus - Top Software for PC, Mac and Android
ShowMyPC appears to be legitimate desktop-sharing software made by a company in Campbell, California. The company may be aware its products are being used for criminal purposes, as the ShowMyPC site displays a warning: "Do not accept help from unknown callers."
The other two buttons would have downloaded two other legitimate desktop-sharing applications, Supremo and Alpemix. Needless to say, you do not want a stranger half a world away poking around on your PC.
To avoid similar tech-support scams, do not trust any phone calls, text messages or browser pop-ups that tell you that you need to upgrade your software, that your PC or Mac is infected or that your computer needs to be tuned up. Don't call any toll-free number, and don't go to any website, that these scammers suggest.
To be able to laugh in their faces when they do contact you, make sure your computer is updated to the latest operating system (Windows 10 or macOS 10.12 Sierra) and that you're running robust antivirus software.