A fake tech support scam is a type of fraud where scammers pose as legitimate technical support personnel from well-known companies to trick victims into giving them access to their computers, personal information, or money. Here’s how these scams typically operate and how to clean up your system if you did/do fall victim to this type of scam!
How Fake Tech Support Scams Work
Initial Contact:
- Cold Calls:
Scammers often call victims directly, claiming to be from reputable companies like Microsoft, Apple, or a popular antivirus provider. They usually say they've detected viruses, malware, or other issues on the victim's computer. - Pop-Up Warnings:
Victims might encounter alarming pop-up messages while browsing the web. These pop-ups often claim that the computer is infected and instruct the user to call a provided number for immediate support. - Emails:
Scammers may send phishing emails that appear to come from legitimate companies, warning about security threats and urging the recipient to call for support.
Convincing the Victim:
- The scammer tries to convince the victim that their computer is at serious risk. They use technical jargon and alarming language to create a sense of urgency.
- They might ask the victim to open certain files or run specific commands that produce harmless but alarming-looking results, reinforcing the scammer’s claims.
Gaining Remote Access:
- The scammer persuades the victim to install remote access software, such as TeamViewer, AnyDesk, or LogMeIn. This gives the scammer control over the victim’s computer.
- Once they have access, they might pretend to run diagnostics or show fake errors to maintain the illusion of a serious problem.
Exploiting Access
- The scammer may install malware, steal personal information, or use the computer to commit further fraud.
- They often demand payment for their "services," claiming they can fix the issues they "found." Payment might be requested via credit card, wire transfer, gift cards, or other non-reversible methods.
Continued Exploitation
- Even after payment, scammers may leave behind software that allows them to regain access or continue monitoring the victim's computer.
- They might sell the victim's information to other scammers, leading to further fraud attempts.
How to Protect Yourself
Be Skeptical of Unsolicited Contact
- Legitimate companies rarely contact customers out of the blue about computer issues.
- If you receive an unsolicited call or message, be wary.
Verify Claims Independently
- Don’t trust pop-ups, emails, or calls without verifying their legitimacy through official channels.
- Look up the company’s official contact information and reach out directly.
Do Not Allow Remote Access
- Never give control of your computer to someone you do not know or trust.
- Legitimate support personnel will not ask for remote access unless you have initiated the contact through verified means.
Use Reputable Security Software
- Keep your antivirus and anti-malware software up to date. Use reputable programs like Malwarebytes Anti-Malware to protect your system.
Educate Yourself and Others
- Learn about common scam tactics and share this knowledge with friends and family, especially those who might be less tech-savvy.
Here's a step-by-step guide to help you ensure your computer is secure and free of any unwanted remote access software if you did fall victim to a fake tech support scam/scammer.
Immediate Steps To Take If You Have Been Scammed
1. Disconnect from the Internet
- Unplug your ethernet cable or turn off your Wi-Fi to prevent further remote access.
2. Identify and Remove Remote Access Software
- Check Installed Programs
- Go to `Control Panel > Programs > Programs and Features`.
- Look for any remote access software (e.g., TeamViewer, AnyDesk, LogMeIn, RealVNC).
- Uninstall any suspicious or unfamiliar programs.
- Check Task Manager
- Press `Ctrl + Shift + Esc` to open Task Manager.
- Go to the `Startup` tab.
- Disable any suspicious entries that start with Windows.
3. Scan for Malware and Adware
- Malwarebytes Anti-Malware:
- Download and install Malwarebytes
- Run a full scan and remove any detected threats.
- ADW Cleaner
- Download and run ADW Cleaner.
- Follow the prompts to clean any adware, toolbars, or PUPs.
Additional Steps You Can Take...
Network Settings
- Ensure no changes have been made to your network settings:
- Go to `Control Panel > Network and Sharing Center > Change adapter settings`.
- Right-click your network connection, select `Properties`, and check for any unfamiliar protocols or services.
Check for Suspicious Services
- Press `Win + R`, type `services.msc`, and press Enter.
- Look for any unfamiliar services that are running and set to start automatically.
- Right-click and stop these services if they seem suspicious
Update Your System
- Ensure your Windows operating system is up to date:
- Go to `Settings > Update & Security > Windows Update`.
- Install any available updates.
Reset Passwords
- Change the passwords for your computer accounts, especially if they have administrative privileges.
- Change passwords for any online accounts accessed from this computer.
Enable Firewall and Antivirus
- Ensure Windows Firewall is enabled:
- Go to `Control Panel > System and Security > Windows Defender Firewall`.
- Make sure you have an antivirus program running and up-to-date.
Monitor for Unusual Activity
- Keep an eye on your system for any unusual behavior or performance issues.
Final Steps
Consider Professional Help
Data Backup and Recovery
- Backup your important data to an external drive or cloud storage.
System Restore or Reinstallation
- If you suspect deep-rooted infections or issues, consider performing a system restore or a clean installation of Windows.
Feel free to reach out if you need further assistance or if anything is unclear. Stay safe!
Pacific NW Computers
