Suspected Telcoline number, uses UltraViewer (ID: 7382477/DESKTOP-9EHUU07)
https://k9pix6j93l61dp2ndzqb.azureedge.net/azure/
- The scammer, “Lisa,” will claim an “attempt of hacking” took place within the past 48 hours, prompting you to “connect to the Microsoft Secure Server” by downloading UltraViewer.
- Once “Lisa” remotely connected to my virtual machine, I was asked to run the “netstat” command in the command prompt before transferring my call to “Alex Smith,” who opened the camera app and checked the popup for my IP address.
- “Lisa” then had me run the “Netstat -a” command so she can falsely claim the “hackers” are listening to our conversation., then a “final scan” with the “dir/s” command. Once the “final scan” is complete, “Lisa” will falsely claim the Chinese hackers MADE AN ILLEGAL SUBSCRIPTION TO CHILD PORNOGRAPHY FROM PORNHUB with the Clampi virus and mobile banking trojans that also removed the Defraggler app.
- As my case was a “case of identity theft,” I was asked not to make any additional phone calls as I receive a call from their “secure phone line,” (801) 396-0064 (Bandwidth.com via Google Voice) before it was transferred to a fellow employee who posed as a representative with my bank.
- I had to receive the call on my TextNow line as my PBX isn’t set up to receive any callbacks yet. I tried faking that I was low on minutes, but they still wanted to call my TextNow line, so I ended them off with the bhenchod song.
