English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Windows Security Phone Scam Now Targeting Sweden

David Jacoby
Kaspersky Lab Expert
Posted January 09, 12:04  GMT
0.2
 

Earlier today, I was sitting at home working on a Linux server that was compromised while suddenly, I hear my home phone ringing. Actually, someone has been calling me and just hanging up around the same time everyday for three or four days now. I thought that it was just some telemarketing company profiling me to figure out if I’m home or not, but this time it was different.

When I picked up the phone I heard this guy introducing him as a technician from the Windows Security Support Department. The connection was VERY bad and I could not hear everything he said, I don't know if this was intended or not.

When I started to talk to him he asked me in English with a indian accent if I had a computer at home, and of course I said “yes”. Then he started to explain that my computer had been compromised and that my firewall was just protecting me against external threats and not internal threats. At this time I knew that something strange was going on, and I started to ask more questions about the malware and trying to get more information about them, then at this point he immediately hung up the phone.

Just after he hung up I realized that this was one of those scams where they trick people to install Remote Access software to be able to control the machines. Once they got access to the machines, they install rootkits and obtain full access to your computer.

In the outside world, I this is quite an effective scam because they called me during the day, and I guess the people who are at home by this hour are not your average security researcher from Kaspersky Lab but maybe people who are sick, or the elderly.

I want to warn everyone about these scams, and at this time I can confirm that they are currently attacking Sweden. Previously, such scams appeared to target UK/US users mostly (http://money-watch.co.uk/8183/windows-support-scam-worsens), but it seems their business is expanding.

Please let us know if somebody calls you and claims they are from “Windows Security” (or such) and asks you to install remote access software. Most important of all, do not install the software which they recommend!


11 comments

Oldest first
Threaded view
 

Richard Baldwin

2012 Jan 09, 16:39
2
 

Richard Balwin

I am based in the UK and only last week I received just such a call. A guy with an Indian accent telling me he was from 'Windows' and that he had detected threats on my computer. When I tried to sound worried and get some more information he hung up.

Reply    

David Jacoby

2012 Jan 09, 16:56
0
 

Re: Richard Balwin

Hi Richard,

Thank you for commenting!

Sounds exactly like the one im talking about, so i guess they are not just targeting Sweden.

Reply    

Martijn Grooten

2012 Jan 09, 17:33
0
 

Hi David,

Thanks for writing this - that's really interesting to hear.

Just to make sure I understand it correctly, the guy did not (attempt to) speak Swedish? Is it common for people in Sweden to receive (legitimate) calls in English? Did he somehow refer to the fact that you're based in Sweden?

I'm just wondering if it could just be someone who entered the wrong access code (46, instead of 44 for the UK, where a lot of these scams are targeted). I'm doing some research into these kind of scams and have been wondering if they target non-English speaking countries in their native languages as well.

Thanks!

Martijn - Virus Bulletin

Reply    

David Jacoby

2012 Jan 09, 23:20
0
 

Re:

Hi Martijn,

You are correct, there were no attempt of speaking Swedish, the entire phone conversation was in English. Ive done some research now and it seems that these guys have been calling Swedish people since the beginning of summer.

I dont know how the choose the victims, but its very clear that Sweden is on that list.

Reply    

Richard Baldwin

2012 Jan 10, 12:57
0
 

Re: UK Phone calls

Hi David
Having sent an email regarding this scam to friends and family, it looks like from their replies that this has been going on in the UK since mid september.

Richard

Reply    

Martijn Grooten

2012 Jan 10, 16:22
0
 

@Richard I'm pretty certain they've been going on in the UK for much longer.

Here's an article (requires free registration) from the beginning of 2011 that mentions such scams in Australia; I believe they were already going on in the UK back then:
http://www.virusbtn.com/virusbulletin/archive/2011/01/vb201101-hello

@David, thanks. It's interesting to learn that they're calling Sweden too.

Reply    

lostinthe60s

2012 Jan 12, 20:23
0
 

Windows phone scam

Hi David,

They are hitting Ottawa, Canada now. Many people I know have been contacted within the last few weeks. I was targeted last week. Although I could barely cut through the accent, I understood that this was a scam. When he said that they had been trying to contact me for some time, I reminded him that Microsoft can contact me at any time they want and that this was a scam. "What a scam?" he said. I replyed that if he couldn't speak english any better than that, then Microsoft would have never hired him. He then got belligerant and I hung up after a few choice comments.

Reply    

David Jacoby

2012 Jan 13, 15:49
0
 

Thank you for your comment. It seems that they are hitting many countries then. I wonder how this is setup, and how many people thats behind this.

Reply    

North4st

2012 Jan 14, 07:30
0
 

Re: Windows support scam

On the west coast of Canada I have been getting these calls for a few months. I have now settled into a pattern of jollying them along for a few minutes and then discussing personal matters with them. I ask the caller what he (and once she) tells their mother they do for a living. Is their mother proud of them. Do they not feel badly for hurting innocent people. The response varies from denial (with hang-up) to quite foul language ... that I'm sure Microsoft would never approve of.

Reply    

theorigin

2012 Jan 28, 03:54
0
 

did get it too

yes as a matter of fact I did get a call like that, me too at first I started asking some simple question and that prompted them to hang up. According to this new report by Australian TV: http://www.whycall.me/info/techsupportscam.php

according to Microsoft's official warning about this an average consumer loses 850$! This is almost hard to believe considering that a brand new computer often costs less

Reply    

Mikael

2012 Feb 02, 18:55
0
 

Just received a phonecall

Hi,
I was working from home in Sweden today and just received such a phonecall on my home number. I am a curious person and fascinated by the mechanics in scams and frauds like this. So i just played along when he called and said i was so glad that he called. Just after he introduced himself with one of those corny names like "Mikael Smith", i said "my computer is full of viruses, thanks for the service of calling me" He got a bit shocked and said "hold on for a second" and went back and their was discussions in the background. Then he asked if i was close to my computer and advised me to press "start and R" buttons to open the run-window. There he told me to write something that i cant remember at the moment. I obviously didnt type anything but i constantly pretended not to hear the letters he told me. Thought somehow i could make his phonebill increase at least.. ;=) After a couple of more discussions on what letters i should type and just before pressing "enter" i asked him if i need an internet connection to solve the issues. I said I canceled my subscription for internet a couple of days ago because of to many viruses on my computer. Then he said " be right back" and went for another lively discussion in the background. When he came back he said there was nothing he could do if i dont have internet. And i thanked him immensely for helping me out and assisting me. Before i hung up i asked him if he wanted to buy something from me. I asked if he needed cheap Viagra. And that i could give him a very good price. Then he actually started laughing and we wished each other a nice weekend before hanging up.

Reply    
If you would like to comment on this article you must first
login


Bookmark and Share
Share