Author Topic: "Microsoft remote support"  (Read 1490 times)

0 Members and 1 Guest are viewing this topic.

Offline Scrambler

  • Newbie
  • *
  • Posts: 6
"Microsoft remote support"
« on: January 18, 2018, 07:00:11 PM »
On Tuesday I had switched off AVAST protection on my Win7 laptop just to check if Microsoft Security was worth a trial - it was not! I went back to AVAST free, and I'm still happy with it!

When I googled for some guidance to set up Mac OS on VMware I suddenly got a pop-up that was even talking to me: Your PC got attacked by "Wanna cry ramsomware", don't use your mouse or keyboard, don't shut down or restart, just call this number (local Swiss phone number).

Just for the fun of it I called them, an Indian guy (acc to dialect) picks up and states being a Microsoft support agen - and how ultra-critical my situation was.

He asks me to open my browser on "fastsupport.com" on which a should install a remote control SW and pass control to him, which I did - eager to see what he would do.

He opened up a notepad sheet to list a number of expensive subscription models for multi-years MS AV support and asked for my credit card. I asked him to show me evidence that he was actually an official MS agent but he failed - as expected. All web forms and docs he showed me had whatever URLs but not from MS.

At this point I cut off the internet connection, uninstalled the 2 SW packaged received and hung up the phone.

Bottomline: they do have talking models that might convince some people, just to steal their money without even having viruses or ransomware at hand!

Best regards
5crambler

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37697
  • F-Secure user
Re: "Microsoft remote support"
« Reply #1 on: January 18, 2018, 07:20:55 PM »
Old news .... go to youtube and search for > fake Microsoft support


Offline Scrambler

  • Newbie
  • *
  • Posts: 6
Re: "Microsoft remote support"
« Reply #2 on: January 18, 2018, 07:30:48 PM »
sorry for this!
protected by Avast I never had this before ;-)
didn't mean to bore anyone.
I searched the forum before placing my msg but did not find anything...

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37697
  • F-Secure user
Re: "Microsoft remote support"
« Reply #3 on: January 18, 2018, 07:37:37 PM »
Nothing to be sorry about, you have done nothing wrong


Quote
  When I googled for some guidance to set up Mac OS on VMware I suddenly got a pop-up that was even talking to me: Your PC got attacked by "Wanna cry ramsomware", don't use your mouse or keyboard, don't shut down or restart, just call this number (local Swiss phone number).   
These are called HTML:FakeAlert.  I think the only way to protect against these is to block the URL, problem is those URLs don't last longer before they move to a new


Lots of FakeAlert pictures here

https://www.google.no/search?q=html+fakealert+screenshots&client=ms-opera-mobile&channel=new&dcr=0&prmd=ivn&source=lnms&tbm=isch&sa=X&ved=0ahUKEwiNtKC4lOLYAhXG3SwKHYCtD0EQ_AUIESgB&biw=1280&bih=800


Videos by David H. Lipman here >>  https://forums.malwarebytes.com/topic/216448-internet-security-alert-code-055bccac9fec/?do=findComment&comment=1189889


« Last Edit: January 18, 2018, 07:47:03 PM by Pondus »

Offline Scrambler

  • Newbie
  • *
  • Posts: 6
Re: "Microsoft remote support"
« Reply #4 on: January 18, 2018, 08:02:01 PM »
thank you anyway!

I think the bottomline should still be:
don't turn off your Avast protection...  8)

many thanks for your quick reply!