Scam Number: +1 (855) 931-5674
Scammer’s Website or Email: https://starfish-app-ep8i5.ondigitalocean.app/werrx01/?phone=+1-855-931-5674&
Additional information about this scam: Just the usual. Reported to DO and got a 6 minute 30 second scambait before I slipped up and asked a stupid question that revealed I was a scambaiter lol
Update: I got a 50 minute scambait on my second call after posting this yesterday, but I couldn’t add that part in because it was being reviewed by mods. I was SECONDS AWAY from getting a money mule account to report (dude told me to pull out my checkbook and a pen, and said the whole “the name on our sales manager’s bank account is:” part before remembering to pull up notepad and ask me for my name and which plan I want to buy). Hopefully, I can catch them next time.
Also, the scammer I talked to was a total goober. He opened up MSINFO32 to check for VMWare stuff, but I followed @JimBrowning11 's guide to making a VM harder to debunk. The one issue was that my BIOS version info still had VMWare shit in there, because the trick in his video made my VM unbootable. I might write a fake virus that prevents you from opening MSINFO32 to get around this issue, since it’s the one massive hole in my VM’s stealthiness right now (besides being able to search up “where am I” and seeing some place like 20 miles away from my real location instead of Albuquerque, New Mexico like I promised). Luckily, this dumbass was scrolling through MSINFO32 a whole 4 or 5 times and didn’t even see the line that mentioned VMWare in it. Also, my Control Panel has the “author” of my fake Visual C++ Redistributable 2005 written as “VMWare” in one of the 4 items, which I’m too lazy to update right now, but that’s a pretty simple fix. He missed that glowing indicator of the prank call, too! (He wasn’t just “going along with it” to waste my time. This was near the beginning of when he got onto my computer, and they started to believe me more when I correctly told them the time and weather in Albuquerque, NM, despite my VM showing Eastern Time. I told 'em I never really got around to updating the timezone, showed them my settings where the auto-update thing was off, and they believed it!)
They’ll ask you to get on https://helpme11.com/ which is their “secure server” (aka an HTML page with 3 buttons where they’ll tell you to click the first technician and get redirected to AnyDesk’s portable version exe download) Update: The second call, they asked me to use Ctrl Win Q to pull up Microsoft Quick Assist, which I never even knew existed. Definitely looks a lot more legit than a random AnyDesk request!
TECHNICIAN 1 is AnyDesk
TECHNICIAN 2 is UltraViewer
TECHNICIAN 3 is Zoho Assist
I finally got a chance to bait one of these scumbags before posting it on here for you guys, so I def had some fun rn.
[size=5]Tell 'em the “put ya dick away waltuh” guy sent ya. They’ll understand who you’re talking about lmao.[/size]
(or on my second call I pretended to be a competing scam call center who was running a virus on the computer to “teach them a lesson” about stealing their victims, so alternatively, you can pretend to be a member of that competitor scam center)