Scam Number: (805)716-7177 (California, USA number, likely VOIP)
Domain Used: vfix.live
Extra Info: Tech Support Scam for a Norton Refund
Used this form to get info: https://docs.google.com/forms/u/0/d/e/1FAIpQLSeiEmeB8U3HT9g2Ijqd5s-TYjwWs6aUuUEXGYtFNhYSyMXzmw/formResponse
Started with a pop-up. It was a typical script of sending too much money and needing a refund. They probably tried to get money from her once they realized she was traveling and not close to a store for gift cards (she told them all of this).
After filling out the form, the scammer remote accesed and went to:
Bank Of America
worldremit
citibank
skype
yahoo email
Discover card
xoom
The scammer tried to make purchases with paypal and transfer money via xoom, but I changed all the passwords and worldremit and xoom were canceled. After calling all the credit cards/banks it was ok again.
This was definitely aimed at an employee at a realtor - be aware!
However, remote access software wasn’t straightforward to detect.
Aside from the “enter the amount” … “oh no!!” terminal part, here is what was in notepad:
Mary **** , the line got disconnected , can you call on 1-805-716-7177.
Are you there?
Reply - yes, I was on a phone app
no worries call me on the above number.
what number?
1-805-716-7177 .ok
Thank You.
I am calling you on 727--*.But it is landing on voicemail.
After that he texted her and said he would call in two hours. He has since been blocked and everything fixed.
Have at 'em!