Scam Number: (870) 726-4745
Scammer’s Website or Email: email
Additional information about this scam:
870-726-4745 Alex Johnson Thursday 3-14-24 10:14AM EST
Level 3 via Skype, baiting with virtual machine
Alex johnson, Peter from Kolkata 103.121.118.2/117/118
Alex answered the phone while clearing his throat loudly into the receiver. I couldn’t let this opportunity pass and I asked him if his father pushed too hard. I think I learned a new curse word today and I know he isn’t happy as I have received calls to my phone where there is silence. I ask if his throat is still sore and I get an immediate hang up.
HIGHLIGHTS FROM VIRTUAL MACHINE BAIT:
- The scammer, “this side Alex Johnson,” will claim your existing Norton subscription expired and was auto-renewed, prompting you to "cancel " by “opening the Google Chrome” and downloading AnyDesk (ID: 3535639008, Password: 9211420w) to “connect to the safe and secure server.”
- Once “Alex” remotely connected to my virtual machine, he opened the command prompt to ping norton.com and told me to hang up the call as my details will be “transferred” to his “billing department.” During this time, “Alex” proceeded to install “the Google Chrome” and download his forked version of ConnectWise through jima1.top (Code: 39313, IP: 85.239.33.183 ).
- Once “Jordan” from the “billing department” remotely connected to my virtual machine, “Alex” attempted to ping norton.com through the command prompt again before I received a call from “Jordan” on his Magic Jack line (425) 440-8095, before I was asked to call their “manager” at their Onvoy line, (205) 205-4771.
- Their “Manager” then had me fill out their “cancellation form,” which falsely claims they are Norton, McAfee, AVG, Avast, Webroot, Kaspersky, Eset, BitDefender, Avira and Malwarebytes and that they are affiliated with the BBB and the FTC.
- I was then asked to log into my nonexistent bank account. Since I don’t do online banking, I was then asked to register for one anyways, so I played him the Bhenchod Song.
https://docs.google.com/forms/d/e/1FAIpQLSenNUZMogkP_R0LzG2Ky5EPWwSCPA7o_Y80YtZHIYmRJfyQTA/viewform
Yeah @drwat I got Kolkata also!
IP Details…
103.178.169.173
Country | India |
---|---|
Region | West Bengal |
City | Kolkata |
ZIP | 700028 |
Timezone | Asia/Kolkata |
Internet Service Provider (ISP) | Oneott Intertainment Limited |
Organization | Sheetal |
AS number and name | AS17665 ONEOTT INTERTAINMENT LIMITED |
Also Carl Johnson
screen connect comp136.top