Geek Squad 844-715-1057

Scam Number: 844-715-1057
Scammer’s Website or Email:
Additional information about this scam:

Using Supremo

Scammer email: [email protected]
Any other scammer information:
Order number/Service Code: WGMYSN728
Total PC Protection for $479.99

RingCentral line, baiting with Virtual Machine

Findings from Virtual Machine bait:

  • Scammer will claim your protection expired last night and that it was auto-renewed.
  • In order to “cancel,” you are asked to download qg.g24.help, which sent an invalid response. The scammer then tried to get me to run QuickAssist, which didn’t open on my virtual machine.
  • The scammer then transferred me to their “senior supervisor,” who had me run SupRemo and write down their "transaction number,"4532765432. Duiring this time, they kept checking their website to see why it was sending invalid responses, blaming it on an outdated version of Windows Defender.
  • The “senior supervisor” transferred me to their “billing officer” after shifting the call to their Magic Jack line ‪(213) 265-9565 and asking me to write down the “transaction number” 493604379. While the call was transferred, the scammer disabled all Windows Defender protections and continued trying to get me to their website and fully password-protected the session with their own password, allowing other benchodes to gain remote access to my virtual machine.
  • Their “refund manager” called from their J2 P2P number ‪(706) 208-4011‬ under the guise of PayPasl and had me fill out a Google Form.. Once they told me to “log into” my bank (fake Chase), I then went to youareanidiot.cc to let them know how much of an idiot he is.

These Bhenchodes keep coming!
IP=132.154.160.79
Details

Using screen connect
URL cw.s24.help
Sorry wrong edit:(
Correct IP =182.68.142.211

182.68.142.211

Country India
Region Bihar
City Patna
ZIP 800002
Timezone Asia/Kolkata
Internet Service Provider (ISP) Bharti Airtel
Organization Bharti Telenet Ltd.
AS number and name AS24560 Bharti Airtel Ltd., Telemedia Services