Fake Virus Alert 888 7952093

Scams Tech Support Scam
1

Scam Number: 888 7952093
Scammer’s Website or Email: https://21augm.z13.web.core.windows.net/
Additional information about this scam:

IMG_1250
IMG_12502160×1620 173 KB

2

888-795-2093 Edward Wednesday 8-21-24 11:25AM EST

3

Carrier: Suspected Telcoline
Call Center Location: India :india:
Answers as: “Suppoat” or “Microsoft”
Technician: “Steven” or “Robert Wilson”
Senior Technician: “Harry”
Falsely Claims: “Attempt of Hacking within the past 48 hours”
Remote Access Software: UltraViewer (Nickname: “Microsoft Secure Server,” ID: 77734105/TECHSUPPORT)

image

“Steven” was too deaf to provide “suppoat,” so I called back and “Robert” was much more patient when providing “suppoat.”

  • Once remotely connected to my virtual machine, “Robert” attempted to view my browsing history before I intercepted him on the grounds of invasion of privacy.
  • “Robert” then ran the “tasklist” command in the Command Prompt and opened the lists of services and installed programs before opening a new Command Prompt window as an administrator, the task manager, the disk cleanup tool and Windows Update.
  • As “Robert” was inactive for an extended period of time, I took it upon myself to run the dir/s command before he closed the Command Prompt Window and opened msinfo32 to check my drivers and falsely claim some of the drivers and services were manually stopped by “the hackers.”
  • “Robert” then opened the command prompt once more to run the “netstat” and “netstat -a” commands so he can falsely claim my network was “hacked” and try to call me back from his “secure line number,” (859) 636-6489, but the call from their TextNow line was “rejected.”
  • After I called “Robert” back, he ran a “final scan” on my device before transferring the call to his “senior technician, Harry,” who ran the “netstat” command once more before falsely claiming that my device was infected with a “trojan virus” and a “keylogger” and that the hackers were from El Paso, Texas and Mountain View, California and used my IP address and identity to purchase CHILD PORNOGRAPHY.
  • I was then asked to log into my email address and nonexistent bank account. But as I don’t do online banking, I told “Harry” that I only access these accounts on my phone and he responded by hanging up instead of transferring my call to the “FTC Department.”