Scam Number: +1 (480) 257-5809
Scammer’s Website or Email: Email from [email protected]
Additional information about this scam:
Rarely anymore do I receive scam emails with phone numbers as nowadays I get usually purely phishing scam emails.
I received though today, 01-Aug-2023, Tuesday, the following email at 8:53 am Central in America.
The guy had me go to https://www.ctrlvk.online/
The email has an attachment named the following but I did NOT open it:
002322325_Inv_Norton.pdf
The subject of the email is the following: Billdesk # 724960870
The email is from the following: Billdesk # 724960870 [email protected]
The contents of the email are exactly as follows:
Dear recipient, [my email address]
Please find enclosed the PDF invoice for the renewal of your subscription. Please kindly evaluate.
To terminate or extend your plan, please contact the hotline at +1 (480) 257-5809.
Thank you for your consideration and best regards to you.
Assistance Desk
+1 (480) 257-5809.
=== === ===
Here is information about the phone number:
-
Phone Number: 480-257-5809
-
Date of this Report: August 01, 2023
-
Phone Line Type: VOIP
-
Phone Company: MAGICJACK
-
Phone Location: PHOENIX, AZ
=== === ===
So today at 9:01 am Central in America I called this scam phone number for the first time. Someone must have answered but I only heard someone speaking a foreign language despite my saying a few times, “Hello? Norton? Is this Norton?” The call hung up without me hanging up.
So I called a second time immediately and a man answered as “Sylvester” with Norton.
I told him I received an email and I want to terminate my plan. I could hear someone in the background speaking a foreign language, so I asked “Sylvester” if he could ask his colleague who is speaking a language other than English to speak less loudly as I am having trouble hearing you.
Haha, he said this colleague just joined Norton. He then said the following, and I am quoting him since I took notes while on the call:
The Norton is a worldwide company.
He said that they have employees who speak various languages.
At that point the person in the background stopped speaking a foreign language. Therefore I told Sylvester that I can hear him now and that I no longer hear his colleague speaking in the background.
He told me that I must be in front of my computer to terminate my plan. He never asked me my name.
He went through the “press Windows key and R at the same time” and I told him that I have very little time and to give me the URL so that I can put the URL into the address bar of a browser. He instructed me again to use the Windows Key/R Key. He told me to type in the following WITHOUT the spaces of course:
w w w . c t r l v k . o n l i n e
I told him that I typed DIRECTLY into the browser the URL and that I see “Enter Service Code” on the webpage. (I think at least some of these types of criminals who try to get on someone’s machine want the potential victim to type the URL into the RUN BOX rather than type the URL directly into a browser because it SEEMS for the potential victim to be more technologically advanced or whatever so as to IMPRESS I guess the potential victim.)
He gave me the following digits to enter into the SERVICE CODE: 36460
He never asked me to open the email’s PDF attachment.
I did not open the PDF attachment myself.
I do not have a virtual machine, so I tried to drag out the process until I could not drag it out anymore.
Have fun with this scam phone number if you want to bait on your VMs and/or harass!
