I’m on the phone with a refund scammer and they put an overlay on my vm screen and I’m wondering what I can do to see it? (I’m using Virtualbox) It says “Your software is updating. Please do not turn off your computer”
i didnt tried it yet but i think that if you will use connectwise in your VM you will be able to watch your screen throw the connectwise, or you can just social engineer the scammer to think you can still see you screen so he will click on the blank screen button again and then say that you cant see your screen (Always work…)
Multiple VM’s must be used
connect to your other VM via another screen connect software (Anydesk, Teamviwer, ConnectWise control etc)
Then you can see what is going on with the scam turd via the second VM