RingCentral line, “Mike Wilson” falsely claimed my nonexistent PayPal account was logged in from a different device and refused to provide “suppoat.”
I called back and “Adam” claimed a hacker made an “illegal transaction” on my account, prompting me to “cancel” by “opening the Google Chrome” and going to glcare.info (Code: 52398/11556 IP: 159.253.120.215 ), an iFrame of dita1.top (IP: 193.233.203.66 ).
I faked the ScreenConnect download not working, so the scammer asked me to run UltraViewer (ID: 80783802/DESKTOP-T25EHGM). Once remotely connected to my virtual machine, the scammer tried to get me to install ScreenConnect remotely, so I played him the Bhenchod Song.