VirusTotal results show PUP/PUA software (Power PC Care 2018)
https://www.virustotal.com/en/file/a06de6b394b5a97d4d01c039c005f886246ae0d9cc4a636ed7be5b58c28e790c/analysis/1541562485/
Does anyone know who the actual company is behind this product? Can we push to get Google/MS to block the URLs within the browser?
AB REACH TECHNOLOGIES PRIVATE LIMITED 706, PLOT NO. 7, ROOTS TOWER DISTRICT CENTRE, LAXMI NAGAR NEW DELHI East Delhi DL 110092 IN [email protected] is owned by very infamous scammers in NOIDA, India:
Ah, gotcha. I’ve found it interesting that their product landing pages show they are selling their product, but giving away McAfee Antivirus. I’ve sent that off to my friends at McAfee to see about getting it taken down. I’ve also reached out to my connections at MS to get the site taken down for trademark infringement. The rabbit hole for this scam is really deep, particularly, if you install their software, you find out more shell corporations.
The support numbers for this app “Power PC Care 2018” aka “WinTonic” aka “PCVark”, is:
US: 855-332-0124
UK: 0800-031-5332
AU: (61)280-733403
All of these numbers route to TechLiveConnect / TLC / Saburi Global Services LLC (TLC's parent company). They use the name PremiumTechieSupport / PTS, but it is Tech Live Connect.
So we have a connection between Benovellient Technologies and TLC.
As Drwat says, here is my exposé of Beno and Sushant Matto:
https://www.youtube.com/watch?v=Tk98EOvdmRI
and the exposé of TLC:
https://www.youtube.com/watch?v=5RY2IavxGbc
I hadn't realised there was a connection between these two organisations until now.
@JimBrowning11#62333 Nice work connecting the two. I wonder if LEO is working on taking these guys down. They seem pretty big, and I’m guessing they are paying LEO to keep quiet.
Something else I’ve uncovered, the email address [email protected], from the digital certificate, also owns the following domains. I dont know if this helps connect more, but here is the list. All domains are from GO DADDY, LLC.
I went ahead and reverse image searched one of their “customer photos” from a link found in their Power PC Care 2018 program, and found that they own multiple other domains, using the same stock photo.