"MS MALWARE ALERT" Fake MS popup,

Working on a clients PC. They Syskey’ed him after he finally got suspicious and refused to pay up. Went through usual scammer routine and totally trashed his PC. Still working on cleanup 2 days later.

Scammers URL:
http://dreamvilla.xyz/

Current Phone Number: (844) 386-2979

@FirePower#110342 Doesn’t work anymore. Worked for a while though.