Earlier this month, ScammerRevolts baited an Indian scam call center impersonating Norton to have victims fill out a “cancellation form” through a forked version of ConnectWise on hghelp.cc. The DIPVTEL number they used, (855) 750-5768, was reported to our platform by @drwat less than a week later, after ScammerRevolts destroyed the MBR of their server with the MEMZ trojan.
https://scammer.info/t/they-are-still-answering/145350
Their form remains active on https://docs.google.com/forms/d/e/1FAIpQLSemk3BAzkF29-RuEfR_aVnQVHOKai5GZBTChYtbPMFSsP1u7A/formResponse