Fake Microsoft Popup 888-405-9781

Fake Microsoft Popup 888-405-9781

http://prestidigitation.host/CH_dsadshelpx/

What’s the best way to find these pop-ups, I’m new to scam baiting and would like some tips.


@jerrycan1991#103789

Cheers!!!!!!

@Vin00oo#103790 This popup belongs to a large-scale campaign apparently. The way I managed to identify related popups and phone numbers was searching for certain IoCs like file hashes on VirusTotal and URLScan.io. Certain things like IP addresses are shared between two domains hosting the popups, which makes easy to map the full campaign.

You can read more about the campaign here:
https://www.icemugger.com/faintedheartnessclub-tech-support-scam/