Don’t fall for this

To the novice computer user a call from a “Microsoft Certified Professional” about your computer contacting a server with viruses could really concern a person. Almost enough to get them to pay for a non-existent or even a free service. Late in 2012 I received a call from a customer who had this exact situation happen to them. IT WAS A SCAM.

The particular “company” at the time, Microsoft PC Support Online, called my customer and claimed her computer was infected and transmitting information. Just this week this exact thing happened to me. Twice. I of course didn’t fall for it, over reacted, and hung up.

The second time I was prepared.

I received a call from an Unavailable number, answered it, and spoke to an individual, ‘Sam,’ clearly Indian, from OSSupport.us who told me he was a support tech to clean my computer infection. I told Sam I had a meeting to get to and would call him back. He gave me their phone number (1–800–870–1306). I prepared a Windows Vista Virtual Machine, brand new, NO viruses or issues, and called back an hour later. Here is my call back.

I really didn’t think they would call me back but they did. Here is the 35 minute call where I let them walk through all the steps of trying to scare me into getting their “Support” which included me paying for a free Microsoft Software for virus protection. They use free, legit remote access tools: TeamViewer, and AmmyRemote to access your computer where they are given full control.
It is quiet the first 30 seconds where I didn’t have speaker phone on.
I try to act surprised and have a little fun at the same time.

This process is very common and for most people can seem a little intimidating but to be clear, no company will ever call you to fix your computer. Do not ever fall for this. These types of solicitations happen all the time. People are Social Engineered very easily. Most of the things they tried to show me could legitimately concern an individual who doesn’t know any better. At the end of the the pervious audio file I almost reverse Social Engineer ‘Sam’ to give me his password so I could use the same tool to take over his computer.

After refusing to pay for their service and ‘Sam’ not giving me his password he finally hung up.
I later called back and harassed them. Below is that 6 minutes of a call I had with Patrick trying to get back in touch with Sam before it gets a little heated. I try to get some information about the company and individuals behind the scam. I even try to find out how I can get employed with them so I can start selling their garbage.

Here is some of the information I gathered throughout this experience. Please use as you wish. These organizations may or may not take your Credit Card information for anything more than your initial payment of their ‘Support’ payment; however, the idea is they charge individuals who don’t know better for services that are not legit. If you ever receive one of these calls, try to get some call back information, go as far as you can with out them getting control of your computer, and forward it to us here at Comrade Technology. We will take care of the rest.

1. Website: http://ossupport.us (118.67.248.199)
2. Site hosted with GoDaddy.com. Click for WhoIS
3. IP 1: India — 178.77.120.103
4. IP 2: Netherlands — 95.211.37.210

Originally published at www.comradetech.com.