Fake Apple / Microsoft Popups

Scams
1

I am mapping a network of popups at the moment and I tumbled across the following phone numbers:

+1 888 357 0413 (Apple virus alert) - Hot!
+1 888 405 9781 (Microsoft virus alert) – Thanks @jerrycan1991
+1 888-899-0628 (Apple virus alert)
+1 888 607 5144 (Microsoft virus alert) – this one is a bit old
+1 888 406 6714 (Microsoft virus alert) – this one is a bit old
+1 888 407 4054 (Microsoft virus alert) – this one is a bit old
+1 888 803 6072 (Apple virus alert) – this one is a bit old
+1 888 407 6521 (Apple virus alert) – this one is a bit old
+1 888 464 7172 (Apple virus alert) – this one is a bit old
+1 888 684 3605 (Microsoft virus alert) – this one is a bit old
+1 844 284 8623 (old)
+1 888 405 9781 (Apple virus alert)
+1 888 407 7898 (Microsoft virus alert) – this one is a bit old
+1 888 789 8122 (Microsoft virus alert) – this one is a bit old
+1 888 815 6016 (Microsoft virus alert) – this one is a bit old
+1 866 380 5162 (old)

If anyone knows which company is behind these, please let me know. Happy hunting!

2

+1 888 527 0471 (Apple virus alert) - Fresh

3

A few more (unverified):

+1 888 472 7985
+1 855 635 7796
+61 1800 581 484
+1 877 337 4804
+1 844 516 4597
+1 877 415 9017
+1 855 541 4348
+1 800 404 8453

4

A few fresh numbers (unverified):

+1 844 550 2646 (Microsoft)
+1 888 886 3810 (Microsoft)
+1 888 831 8563 (Microsoft) - two days old

5

@IceMugger what type of popup are these coming from? Can you give a screenshot or paste some details as toward the scam type. Thanks!

6

@CJones#104003 I found them through standard threat hunting practices by pivoting on certain IOCs of this campaign.

Here are a few screenshots to give you an idea:
https://twitter.com/IceMugger/status/1160149641943347200

7

If you can paste the domains where these popups are hosted on, that would be great, and possibly allow me to find out more about the scam.

8

@Consuela#104022 I will publish the list of domains and the IoCs soon. Until then, here are a few more numbers:

+1 833 273 7078 (Microsoft)

9

@Consuela#104022 I will publish the list of domains and the IoCs soon. Until then, here are a few more numbers:

+1 833 273 7078 (Microsoft)
+1 866 670 2474 (Microsoft)
+1 833 275 7106 (Microsoft)
+1 888 886 3810 (Microsoft)
+1 866 670 0656 (Microsoft)
+61 885 129 919 (Apple)

10

+1 866 614 4470 (Apple) - a couple of weeks old, could be disconnected by now

11

I just published my write up about this pop up campaign and made the IoCs public to help identify the related popups in the future: https://www.icemugger.com/faintedheartnessclub-tech-support-scam/

12

I found a new Microsoft scam