Here’s a site using the typical Web Infotech infrastructure and list of impersonated brand names to inject a virus script into the victim’s Windows computer!
On March 28, 2026, our good friend Nanobaiter uploaded a video to his YouTube channel exposing a group of Turbotax tech support scammers and even infecting one of their computers with trojans like Bonzify.
The call center identified in this particular video is WeConnect Soft Solutions Private Limited out of * 2-Kha-6, Deep Shree Tower, Vigyan Nagar, Kota, Rajasthan, India.
The scammers will operate the website installturbotax.net to trick victims into going to a faje activation form (at the time of writing: ts.activatetax.pro) which is designed to trick users into calling a dedicated “suppoat” line to “activate their license.”
The scammers will then gain remote access to their victims’ computer through programs like QuickAssist,TeamViewer and UltraViewer before running the “netstat” command in the Command Prompt so they can falsely claim their victims’ network was compromised by multiple foreign hackers.
The scammers will then offer their victims’ a “suppoat” package for as little as $299.99 for a two-year plan, though in one instance, they had an elderly female withdraw $10,700 from her bank account and deposit the cash at a Bitcoin ATM.
The scammers have also been on our radar since January 6, 2021 for facilitating activation scams under the false personation of Amazon representatives. Back then, they operated under the name if iConnect Soft Solutions, Ltd.
