I am mapping a network of popups at the moment and I tumbled across the following phone numbers:
+1 888 357 0413 (Apple virus alert) - Hot!
+1 888 405 9781 (Microsoft virus alert) – Thanks @jerrycan1991
+1 888-899-0628 (Apple virus alert)
+1 888 607 5144 (Microsoft virus alert) – this one is a bit old
+1 888 406 6714 (Microsoft virus alert) – this one is a bit old
+1 888 407 4054 (Microsoft virus alert) – this one is a bit old
+1 888 803 6072 (Apple virus alert) – this one is a bit old
+1 888 407 6521 (Apple virus alert) – this one is a bit old
+1 888 464 7172 (Apple virus alert) – this one is a bit old
+1 888 684 3605 (Microsoft virus alert) – this one is a bit old
+1 844 284 8623 (old)
+1 888 405 9781 (Apple virus alert)
+1 888 407 7898 (Microsoft virus alert) – this one is a bit old
+1 888 789 8122 (Microsoft virus alert) – this one is a bit old
+1 888 815 6016 (Microsoft virus alert) – this one is a bit old
+1 866 380 5162 (old)
If anyone knows which company is behind these, please let me know. Happy hunting!
+1 888 527 0471 (Apple virus alert) - Fresh
A few more (unverified):
+1 888 472 7985
+1 855 635 7796
+61 1800 581 484
+1 877 337 4804
+1 844 516 4597
+1 877 415 9017
+1 855 541 4348
+1 800 404 8453
A few fresh numbers (unverified):
+1 844 550 2646 (Microsoft)
+1 888 886 3810 (Microsoft)
+1 888 831 8563 (Microsoft) - two days old
@IceMugger what type of popup are these coming from? Can you give a screenshot or paste some details as toward the scam type. Thanks!
@CJones#104003 I found them through standard threat hunting practices by pivoting on certain IOCs of this campaign.
Here are a few screenshots to give you an idea:
https://twitter.com/IceMugger/status/1160149641943347200
If you can paste the domains where these popups are hosted on, that would be great, and possibly allow me to find out more about the scam.
@Consuela#104022 I will publish the list of domains and the IoCs soon. Until then, here are a few more numbers:
+1 833 273 7078 (Microsoft)
@Consuela#104022 I will publish the list of domains and the IoCs soon. Until then, here are a few more numbers:
+1 833 273 7078 (Microsoft)
+1 866 670 2474 (Microsoft)
+1 833 275 7106 (Microsoft)
+1 888 886 3810 (Microsoft)
+1 866 670 0656 (Microsoft)
+61 885 129 919 (Apple)
+1 866 614 4470 (Apple) - a couple of weeks old, could be disconnected by now
I just published my write up about this pop up campaign and made the IoCs public to help identify the related popups in the future: https://www.icemugger.com/faintedheartnessclub-tech-support-scam/
I found a new Microsoft scam