Norton LL refund (870) 726-4745

Scam Number: (870) 726-4745
Scammer’s Website or Email: email
Additional information about this scam:

3 Likes

870-726-4745 Alex Johnson Thursday 3-14-24 10:14AM EST

14 Likes

Level 3 via Skype, baiting with virtual machine

3 Likes

Alex johnson, Peter from Kolkata 103.121.118.2/117/118

3 Likes

Alex answered the phone while clearing his throat loudly into the receiver. I couldn’t let this opportunity pass and I asked him if his father pushed too hard. I think I learned a new curse word today and I know he isn’t happy as I have received calls to my phone where there is silence. I ask if his throat is still sore and I get an immediate hang up.

2 Likes

HIGHLIGHTS FROM VIRTUAL MACHINE BAIT:

  • The scammer, “this side Alex Johnson,” will claim your existing Norton subscription expired and was auto-renewed, prompting you to "cancel " by “opening the Google Chrome” and downloading AnyDesk (ID: 3535639008, Password: 9211420w) to “connect to the safe and secure server.”
  • Once “Alex” remotely connected to my virtual machine, he opened the command prompt to ping norton.com and told me to hang up the call as my details will be “transferred” to his “billing department.” During this time, “Alex” proceeded to install “the Google Chrome” and download his forked version of ConnectWise through jima1.top (Code: 39313, IP: 85.239.33.183 :moldova:).
  • Once “Jordan” from the “billing department” remotely connected to my virtual machine, “Alex” attempted to ping norton.com through the command prompt again before I received a call from “Jordan” on his Magic Jack line ‪(425) 440-8095‬, before I was asked to call their “manager” at their Onvoy line, (205) 205-4771.
  • Their “Manager” then had me fill out their “cancellation form,” which falsely claims they are Norton, McAfee, AVG, Avast, Webroot, Kaspersky, Eset, BitDefender, Avira and Malwarebytes and that they are affiliated with the BBB and the FTC.
  • I was then asked to log into my nonexistent bank account. Since I don’t do online banking, I was then asked to register for one anyways, so I played him the Bhenchod Song.

https://docs.google.com/forms/d/e/1FAIpQLSenNUZMogkP_R0LzG2Ky5EPWwSCPA7o_Y80YtZHIYmRJfyQTA/viewform

3 Likes

Yeah @drwat I got Kolkata also!
IP Details…

103.178.169.173

Country India
Region West Bengal
City Kolkata
ZIP 700028
Timezone Asia/Kolkata
Internet Service Provider (ISP) Oneott Intertainment Limited
Organization Sheetal
AS number and name AS17665 ONEOTT INTERTAINMENT LIMITED
2 Likes

Also Carl Johnson
screen connect comp136.top

1 Like