Slashdot Mirror
Microsoft Customers Hit With New Wave of Fake Tech Support Calls
rjmarvin writes "A new surge of callers posing predominately as Microsoft technicians are attempting and sometimes succeeding in scamming customers, convincing them their PCs are infected and directing them to install malware-ridden software or give the callers remote access to the computer. The fraudsters also solicit payment for the fake services rendered. This comes only a year after the FTC cracked down on fake tech support calls, charging six scam operators last October."
This looks more like an advertisement for sdt.bz than an actual Slashdot article.
Here's the real article:
http://www.computerworld.com/s/article/9244207/Fake_Windows_tech_support_calls_continue_to_plague_consumers
NOW they listen to the IT guy's instructions?
Too bad about the do not call list. It severely cut down my abilities to mess with telemarketers.
First one
"OH thank GOD you called this computer has been a mess for 3 days I can not get rid of this virus" *click*
second one I was busy putting in a AC unit
I was going to go with bringing up a linux VM and seeing how far he got. But the AC needed my attention more.
"its a scam you know it I know it move on" *click*
Third one is my best work so far
"That is totally cool how did you do that?"
"Oh the computer calls in and we reach out to our customers"
"No I mean how did you do that when I have no computers"
"well someone in your household must have one"
"Just me living here"
"there *must* be a computer"
"Nope got rid of the blasted things I hate them"
It was most amusing the guy could not conceive that I did not own a computer.
So far my record for getting them stay online before they hangup is 7 mins.
In fairness, this has nothing at all to do with Microsoft, other than most people have it, and most people aren't really tech savvy.
This is just social engineering. Some guys calls up, claims to be from "tech support" or "the Windows Service Provider" and tells you a little techno-babble that sounds scary.
They don't actually have any information about you, and if pressed couldn't even tell you your IP address or even your name -- it's just a blanket approach.
But then they tell you to follow some steps to give them access to your computer, and they make some mumbling about how bad it is and attempt to either steal your files, or convince you that you need to buy some extra services.
A friends father in law got scammed with this a few years ago, and my friend was somewhat livid because he'd explicitly told them about such scams and to hang up on anybody who is telling you that. But people don't know that Microsoft doesn't really have your phone number and aren't monitoring your system.
If you know that 80% of everyone is running Windows, and most of them don't really have a good understanding of what's going on, all you think is some friendly guy is contacting you to solve problems you didn't even know you had. It's just like spam, hit enough people and some fraction will fall for it.
I've actually spent the last 5+ years explaining to my parents how to spot a scam, why they should never trust someone who calls them, and to be generally skeptical of such things. I've managed to turn my parents into somewhat skeptical, and a lot more street smart people by hammering home some of this stuff. But I had a great aunt who was a lot more trusting and got scammed several times.
And since every time someone tries to implement a Do Not Call list, the lobbyists cry "but what about our business model" and the protections get weakened to the point of being meaningless.
And since everyone can fake their phone number (which to me is a huge part of the problem) people see something on their call display and believe it. Which means some douchebag is whateverthefuckistan can call you and look like anything they want to, and the phone companies and the companies who believe it's their right to call you exploit that.
I've actually set my Panasonic cordless phone to say "Unknown caller id means hang up", "Private caller means hang up". I still get stuff that gets through (when you see a local number and hear a long distance ring) -- but I start out with the assumption that I don't trust incoming callers.
But getting everyone to understand how these scams work is hard. Getting people to overcome a belief that others are honest and good takes work.
Lost at C:>. Found at C.
I do technical support, but people have to come to me. I tell all my customers and potential customers that nobody cold-calls you, tells you they "have noticed" that your machine needs repair, and offers to do same. This is guaranteed to be a scam.
Other indications: A heavily accented voice saying: "Hello, my name is Frank and I am from The Microsoft and I am calling because we have noticed that your computer is infested with the viruses." I'm sorry, not only does nobody make that kind of call, nobody talks like that. (I have a friend who works at "The Microsoft", and he has decided he will henceforth be addressed as "The Frank"....) Like anything else these days, scam call centers are typically low paid foreign nationals with poor communication skills who are following a script. They do it this way because (a) the overhead is very low, and (b) it works, at least, often enough to be profitable.
These scams are not limited to fake tech support. I got a robocall a few weeks ago saying "This is a message from Chase bank. We regret to inform you that your Chase bank card has been frozen. To unlock your card, please press one to be connected to our security department". Obviously the helpful, heavily accented person you get when you press one will helpfully take your card number and identity, "unlock your card" and you'll have been robbed.
It's all the same type of scam. People sitting at card tables patiently calling number after number with the same, pre-written script, secure in the knowledge that there will be enough people who buy it to make their pimp happy and maybe they'll get a place to sleep that night.
Never give personal information to a cold call. Never believe anything you hear from a cold call. If you think it could be legit, conclude the call, look up the *real* number of whatever institution purports to have called you, and call them. Real institutions (even creditors) will understand when you insist on doing this. Do I really have to say, do *not* believe a cold call when they give you a number to call back.
Let's be careful out there.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
I played along when they called me. Acted like i knew nothing about computers. I could almost hear him drooling over the phone. After 10 minutes of him trying to get me to click start, he asked what version of windows I had. When I told him it was linux, he said "Oh, f*ck you!" and hung up the phone. I was probably more entertained by that then I should have been.