Greg's Corner

Tagged: Microsoft Toggle Comment Threads | Keyboard Shortcuts

• 

  Geebo 8:00 am on July 22, 2024 Permalink | Reply
  Tags: CrowdStrike, Microsoft, phishing ( 75 ), Scams ( 1,354 )   

  Scams expected in wake of CrowdStrike crash 

  

  By Greg Collier

  On Friday, a faulty software update from CrowdStrike’s Falcon monitoring platform caused widespread disruptions, affecting 8.5 million Windows devices globally. This incident led to significant interruptions in various services, including online banking and air travel, despite accounting for less than one percent of all Windows machines. The outage was not the result of a cyberattack, but it has sparked serious concerns about opportunistic scams exploiting the chaos.

  In the wake of the outage, both CrowdStrike and several government-affiliated agencies have issued warnings about a surge in phishing and scam activities. Scammers are quick to capitalize on the confusion, using tactics such as malicious domain registrations, phishing emails, and fraudulent phone calls. A notable scam involves a ZIP archive named “crowdstrike-hotfix.zip,” designed to steal data from unsuspecting users.

  Staying safe during this period requires vigilance and caution. Be aware of phishing scams claiming to resolve the outage, and avoid downloading software or opening attachments from unknown sources. When receiving requests for personal information, always verify the sender and never share sensitive details with unverified contacts. It’s crucial to use official channels when seeking assistance. Contact companies directly through their official websites or help desks, and make sure to visit CrowdStrike and Microsoft’s dedicated support pages for accurate information.

  Scammers often create a sense of urgency to prompt hasty actions. Resist the pressure to act quickly and take your time to verify any communication you receive. Reporting scams is essential. In the U.S., report fraud to the Federal Trade Commission.

  Support vulnerable individuals by checking in with elderly friends and family members who might be targeted. Ensure they understand the current scam tactics and know how to stay safe. This collective vigilance can help protect against the wave of scams taking advantage of the current situation.

  Experts advise that the best course of action when uncertain about a communication is to contact businesses directly. This helps avoid falling for scams masquerading as legitimate offers of assistance. Additionally, it’s important not to succumb to pressure and rush into actions that could compromise personal information.

  As the fallout from the CrowdStrike-induced outage continues, maintaining vigilance and adhering to these safety measures will help protect against the wave of scams. Remember, forewarned is forearmed. Stay informed, cautious, and always verify the sources of any communications you receive.

   

  Leave a ReplyCancel reply
• 

  Geebo 8:00 am on May 22, 2024 Permalink | Reply
  Tags: impersonation scam ( 144 ), Microsoft, pop-ups ( 26 ), Scams ( 1,354 ), tech support scam ( 49 )   

  A Microsoft employee is not coming to your home to collect money 

  

  By Greg Collier

  For years, scams thrived in the digital shadows, but the landscape is shifting. Traditionally safe havens like our homes are no longer immune, with a troubling rise in scammers taking a physical approach. Preying on the vulnerable and unsuspecting, these fraudsters are turning up on doorsteps, demanding cash or valuables under false pretenses. This aggressive tactic adds a frightening new layer to the ever-evolving world of scams. These personal invasions intensify the financial impact and significantly heightens the emotional distress experienced by the victims.

  For example, a new and particularly insidious fraud scam has emerged in Asheville, North Carolina, catching the attention of both local law enforcement and cybersecurity experts. According to the Asheville Police Department (APD), suspects are now posing as Microsoft employees after hacking into victims’ personal computers. This scam stands out due to its in-person element, which is becoming less of a rarity in the realm of fraud.

  The scheme typically begins with a pop-up message on the victim’s computer, falsely claiming that the system has been locked or frozen. The message prompts the victim to call a number purportedly linked to Microsoft. Once contact is made, the scammers, posing as Microsoft representatives, instruct the victims to withdraw cash from their bank accounts. In a bold escalation, an individual claiming to be a Microsoft employee then arrives at the victim’s residence to collect the money, setting this scam apart from more common remote fraud tactics.

  Microsoft, along with other large technology companies, does not send representatives to individuals’ homes to collect payments or resolve technical issues. These companies operate through official communication channels such as verified emails, phone calls from authenticated support centers, and secure online platforms. Any request for personal information, financial details, or payments through home visits is not a legitimate practice of these companies.

  Never trust unsolicited tech support calls or pop-ups. Verify company representatives directly. If someone claims to be from Microsoft (or any other company), don’t give out personal information or money. Look up the company’s official contact details and reach out directly.

  The emergence of scammers coming directly to victims’ homes introduces a new level of danger and urgency in combating fraud. This approach not only threatens financial security, but also poses significant personal safety risks. Allowing an unknown individual into one’s home under false pretenses can lead to confrontational or even violent encounters. It is crucial to remain cautious and skeptical of any unexpected visitors claiming to represent companies or requesting personal information.

   
• 

  Geebo 8:00 am on April 7, 2023 Permalink | Reply
  Tags: fear, Microsoft, pop-ups ( 26 ), Scams ( 1,354 ), tech support scam ( 49 )   

  The Psychology of Scams 

  

  By Greg Collier

  Fear can be a great motivator. Fear triggers are fight or flight responses and often force us to make a split-second decision. Even though we’re making a decision in that short amount of time, that decision isn’t always the right one, and in many cases, that decision may not even make sense. That’s why fear is the greatest tool in the scammer’s arsenal.

  Let’s take a look at a scam that happened recently in Minnesota. A 65-year-old woman lost $20,000 to the Microsoft pop-up scam. She received a pop-up on her computer that said she needed to call Microsoft. That’s where the fear starts. For people not super-familiar with how computers work may think the worst when getting a message like that. Have I been hacked? Is my identity being stolen? Will I lose all my pictures and personal files? Has my entire digital life been compromised?

  The answer the woman got after calling the supposed phone number to Microsoft was probably worse than she could have imagined. The person she spoke with told her that there had been suspicious activity on her computer, and she needed to call the Federal Trade Commission and was given another number to call.

  When she called who she thought was the FTC, she was told her IP address was being cloned and used by someone in Texas for illegal activity.

  An IP address is like a phone number for your computer. Just as you need a phone number to make a call, your computer needs an IP address to connect to the internet and communicate with other devices. The IP address is a unique set of numbers assigned to your device by your internet service provider (ISP) that identifies it on the internet.

  The person who was supposedly from the FTC told the woman that her IP address was being used to view explicit illegal images and illegal gambling. At this point, the scammers have elevated their fear tactics. Illegal gambling may not seem so bad, but when you add it to one of the worst online crimes a person could commit, and that you could be blamed for it, would send anyone into a deep state of fear.

  The woman was then told that this was all part of an international money laundering scheme, and she needed to protect her money. The scammer told her she needed to take $20,000 out of her bank and UPS it to an address in Florida. She suggested she would withdraw the money and keep it in her home. The scammer told her if she did that, the local police would arrest her for money laundering. That probably pushed the woman into an even bigger panic, which is precisely what the scammers want.

  We have the benefit of hindsight to be able to look at this scam and can see how convoluted it is. Microsoft doesn’t know what’s going on your computer. They’re also infamously known for being difficult to get a hold of. Even if they did know your device was compromised, they would tell you to call the FTC, who is also known for being difficult to contact, as most government agencies are. And no government agency would ever threaten a citizen with arrest over the phone.

  So, we may look at this and wonder how anyone could fall for this scam, but when fear kicks in like this and someone is dealing with the pressure of the moment, anyone could be vulnerable to a scam.

   
• 

  Geebo 9:00 am on December 30, 2022 Permalink | Reply
  Tags: American Express, Facebook ( 178 ), gift cards ( 100 ), Macy's, Microsoft, pop-ups ( 26 ), recovery service ( 8 ), Scams ( 1,354 ), social media ( 79 ), tech support scam ( 49 )   

  Scammers try to scam victim again 

  

  By Greg Collier

  In the 1984 sci-fi classic ‘The Terminator’, one of the protagonists describes the Terminator by saying, “It can’t be bargained with. It can’t be reasoned with. It doesn’t feel pity, or remorse, or fear. And it absolutely will not stop… ever.” That’s an apt description of scammers as well. They will use any opportunity to scam someone, no matter what the cost may be to the victim. And if that victim has been scammed before, then that just means they can be scammed again, according to scammers. Even if the intended victim didn’t fall for the scam, that doesn’t mean scammers won’t try to scam them again.

  A Rhode Island widow says she was scrolling Facebook on her computer when she started receiving a number of pop-ups that said her computer was infected and to call Microsoft at the number listed. Avid readers of this blog will recognize this as the pop-up scam. The phone number doesn’t actually go to Microsoft and instead goes to a scammer’s call center.

  After calling the number, the widow was told that her American Express card had been compromised, and she was about to be charged $16,000 for a fraudulent purchase. She was then connected to another scammer posing as an American Express agent. That scammer told her she would need to buy $8000 in Macy’s gift cards to override the fraudulent charge. The victim went and bought the gift cards while the scammer stayed on the line with her.

  The scammer told her to scratch the backs of the cards and give him the code numbers. The victim gave him one before realizing this may be a scam. Instead of giving the remaining numbers to the scammer, she went to the police. But the story doesn’t end there.

  The victim didn’t want anyone else to fall victim to the same scam she did. She posted a warning about it on Facebook. It didn’t take long for her to receive a comment from another scammer. This scammer said that the FBI helped them get their money back and the victim would need to text a phone number left by the scammer. The supposed FBI agent kept asking the victim for personal information in exchange for assistance. Thankfully, the victim realized this was a scam and ceased all communications with the scammer. Scammers never stop scamming.

  While the first scam is one that we’ve gone into detail before, the second scam is not so well known. That scam looks for scam victims on social media, and will try to send victims to a phone number or social media account that can supposedly help a victim get their money back. This is just another scam. Once money is lost to a scam, no recovery service can get it back, no matter how much someone promises you they can.

   
• 

  Geebo 9:00 am on December 1, 2022 Permalink | Reply
  Tags: customer service ( 50 ), Microsoft, pop-ups ( 26 ), Scams ( 1,354 ), tech support scam ( 49 )   

  Microsoft pop-up scam claims more elderly victims 

  

  By Greg Collier

  The technical support scam has been around almost as long as the internet has been commercially available. The scam can take many forms, but they all have the same goal. They all try to trick their victims into calling a phony technical support number. From there, any number of things can happen, from identity theft to the complete loss of a victim’s savings.

  However, there is one particular technical support scam that has become so prevalent lately, it might just be the second most common scam behind the arrest warrant scam. As we’ve said previously, barely a day goes by where we don’t see a report about this scam in multiple locations.

  The scam in question is the Microsoft pop-up scam. This is where a computer user either goes to a website or downloads an app that will trigger a pop-up telling them their computer has been compromised, and they need to call Microsoft support at the number listed on the pop-up. The elderly have largely been targeted in this scam, and many elderly victims have lost thousands to hundreds of thousands in this scam. It’s become such an issue recently, the FBI have issued a warning about the scam.

  The most recent victims who have come forward about the scam are an elderly couple from Michigan. They received one of these pop-ups on their computer stating the computer had been infected with a virus, and they need to call Microsoft immediately at the number given. They called the number and scammers told them they had to convert the money in their bank account to Bitcoin. The couple ended up sending $3000 to the scammers through a Bitcoin ATM.

  Microsoft has assured users that any legitimate pop-up from Microsoft about a virus will never include a phone number. The company recommends that if you receive one of the pop-ups with a phone number to press CTRL+ALT+DEL on your keyboard, clicking on Task Manager, and closing any programs they were using when the pop-up appeared.

  If you end up talking to one of these phony support centers, they’ll ask for remote access to your computer. You should never allow anyone you don’t know personally to have remote access to your computer, as that access is only used to further the scam or steal more information.

  If you have lost money to this scam, contact your local police department right away, then register a complaint with the FBI at ic3.gov.

  If someone in your family or someone in your community is an elderly computer user, please warn them about this scam.

   
• 

  Geebo 8:00 am on November 2, 2022 Permalink | Reply
  Tags: Microsoft, pop-ups ( 26 ), Scams ( 1,354 ), tech support scam ( 49 )   

  Computer pop-up scams are an everyday danger 

  

  By Greg Collier

  Recently, we mentioned that hardly a day goes by where we don’t see stories about the arrest warrant scam. Now, there’s another scam we keep seeing consistently on a daily basis that’s stealing thousands of dollars at a time from its victims. It’s the computer pop-up scam.

  This is the scam where pop-up windows, notices, or other kind of messages show up on your computer saying that you have a virus, or you’ve been hacked in some way. These notifications will almost always say not to turn off your computer and will provide a phone number to call to resolve the problem. These pop-ups will often imitate legitimate looking notices from within Windows itself.

  The pop-ups often show up after users click on a scam ad, visiting a shady website, or installing software from an unreliable source.

  Unfortunately, too many people are falling prey to this scam. For example, a man in North Carolina lost $14,000 after receiving these pop-ups. He called the number listed that claimed to be from Microsoft. He was told this was related to a banking issue, and was asked where he banked. The man told the supposed customer service rep that he banked at Bank of America. He was then told he was being connected to B of A’s fraud department.

  While he was on the phone with the phone B of A rep, the man was directed to a clone of the bank’s website, where he was shown a phony transaction that said $14,000 had been transferred out of his account. To stop the transfer, he was instructed to wire money the money to a third party who would catch the bank hackers. Once the man wired the $14,000, it was gone for good.

  The best way to protect yourself from malicious pop-ups is to avoid downloading random software and apps to your computer. You should also be wary of clicking on ads from social media, as anyone can take out ad space on Facebook. Lastly, you should not click on any links sent to you by anyone you don’t know personally.

  If you still get one of these pop-ups, do not call the number listed. It’s not going to be Microsoft, Apple, Facebook, or Google on the other line. You should restart your computer and if you keep getting the pop-up, run a scan using Windows Defender on your PC to make sure you don’t have any malware. Below, we’ll include a video on what to do if you receive any of the pop-ups.

   
• 

  Geebo 8:00 am on August 18, 2022 Permalink | Reply
  Tags: cybersecurity ( 37 ), malware ( 26 ), Microsoft, Office, Scams ( 1,354 ), usb drive ( 2 )   

  Free Microsoft Office flash drives are a scam 

  

  By Greg Collier

  If you use a computer at home or at work, there’s a pretty good chance you’ve used the Microsoft Office suite. It’s the software package that contains Word, Excel, and PowerPoint among others. While you don’t have to pay for Office at your job, you do have to pay for it if you want to use it at home after the limited free trial is over? Currently, Microsoft is charging $100 a year to home users, but what if a free version was shipped to your home? Would you install it on your computer? You may want to think before installing Office if you received it in the mail.

  According to cybersecurity experts, residents in the UK have been receiving USB drives in the mail that appear to be coming from Microsoft. The box that the flash drives come in even looks like an official Microsoft product. However, if you plug the flash drive to your computer, you won’t get Microsoft Office. Instead, you’ll get a virus warning pop up on your computer, along with a phone number to call Microsoft at, so you can resolve your issue. Except, the number doesn’t really go to Microsoft. It goes to a phone bank of scammers instead.

  If someone were to call the phone number, the scammer will ask you to download a program that would give them remote access to your computer. From there, a number of scams can be perpetrated, such as stealing your financial login credentials, among others.

  Just in general, you should never plug strange USB drives into your computer. Whether you find one in a parking lot or get one in the mail, plugging strange drives into your computer can cause any number of problems, from scams to ransomware and more. If you put a strange USB drive into your computer, you’re risking not only compromising your computer, but potentially other computers in your home or business network as well. USB drives that you didn’t buy personally should be seen as suspicious and should be disposed of.

  And while this is currently happening in the UK, it could be only a matter of time before we see these flash drives being sent to US citizens.

   
• 

  Geebo 8:00 am on July 6, 2022 Permalink | Reply
  Tags: bitcoin ( 31 ), bitcoin atm ( 24 ), Microsoft, pop-ups ( 26 ), Scams ( 1,354 ), tech support scam ( 49 )   

  Scammer drives elderly victim to Bitcoin ATM 

  

  By Greg Collier

  Scammers showing up at the door of their elderly victims is unfortunately not new. We’ve seen this mostly with the grandparent scam, where the scammers pose as couriers picking up the money to supposedly bail out one of the victim’s grandchildren. We’ve also seen an increasing number of scammers who get their victims to give the scammers their money through Bitcoin ATMs. This mostly happens with shut off scams, where the scammers pose as power companies, threatening the victims with their service being shut off immediately if they don’t pay. Now, take the two most alarming parts of those scams, and you have one of the more frightening scams we’ve discussed.

  In Fresno, California, an elderly woman got a pop-up on her computer claiming her device had a virus and that she needed to call Microsoft. The number included in the pop-up did not go to Microsoft, but to a scammers’ phone. The scammer told the woman that someone overseas is trying to hack into her bank account. She was instructed to go to her bank and withdraw $9,000. The scammer also told her that she couldn’t call anyone else, or their phone would get the virus. She was even told to tell the bank that she was withdrawing her money to buy a new car if the bank asked.

  After withdrawing the money, the bank manager even drove the woman home due to the heat and the fact she was carrying a large amount of cash. She had taken an Uber to get to the bank.

  After she got home, the scammer called her back and said that having a large amount of cash at home was a security risk, so they’ll send someone to her home to take her to a Bitcoin ATM to ‘protect’ her money. Someone picked up the woman and drove her to a gas station, where they instructed her on how to deposit the money into the Bitcoin kiosk. This actually sent the money to the scammers and was unrecoverable. Thankfully, the scammer or their accomplice took the woman home unharmed.

  There are few things more frightening than thinking about an elderly relative being driven by a stranger while they’re carrying a lot of money. We’re sure it also makes the scam victim feel less secure in their own home.

  As is with most tech support scams, computer companies like Microsoft or Apple have no idea whether your computer has a virus or not. If they did, that would be a huge breach of privacy. Also, any time someone you don’t know tells you not to call your family or police is virtually guaranteed to be a scammer. Lastly, you can’t protect your money at a Bitcoin ATM. They are mostly used to convert cash to Bitcoin. In these scams, victims are depositing their cash into the scammer’s Bitcoin wallet.

  Scams like this can be devastating to the elderly, as some families decide to oversee their finances. While this would alert family members to large bank transactions, many seniors feel like this robs them of their independence.

   
• 

  Geebo 8:00 am on June 13, 2022 Permalink | Reply
  Tags: bitcoin atm ( 24 ), car wrapping ( 11 ), fake check ( 47 ), job scam ( 79 ), Microsoft, prescription drugs ( 5 ), ransomware ( 11 ), Scams ( 1,354 ), tech support scam ( 49 )   

  Scam Round Up: Door to door prescription scam and more 

  

  By Greg Collier

  Today, we’re bringing you three more scams happening around the country that could easily show up in your area.

  ***

  With the weather being warmer, even with rising gas prices, more people are taking to the roads. This has allegedly led to a resurgence of the car warp scam. This is when scammers promise their victims they can make money by wrapping their car in advertisements. While there are legitimate offers for this, the majority of them online are scams. The car wrapping scam is just another avenue for the fake check scam. The scammers send victims a fake check they’re supposed top deposit into their bank account and then use the remainder of the check to pay an ad agency who provides the wrap. The supposed ad agency is part of the scam as well. The victim almost always ends up being held responsible for the full amount of the check to their bank.

  ***

  Unfortunately, another elderly victim was recently targeted in yet another computer virus scam. The Massachusetts woman was using her computer when a message said that her device had been compromised. The message contained a phone number that claimed to be from Microsoft and that she would need to call it to have her computer fixed. This number did not go to Microsoft, but instead went to what is essentially a call center for scammers. They instructed her to take $30,000 out of her bank account and deposit it into a Bitcoin ATM. Luckily, police were able to intervene, and the woman got her money back. Keep in mind with this scam that companies like Microsoft don’t usually take phone calls, and no computer repair is worth $30,000.

  ***

  Lastly, we have a story out of Oklahoma City, where authorities are warning about a particularly frightening scam. Law enforcement there are saying that people there are posing as pharmacy employees and going door to door asking residents for expired medication. These are not pharmacy employees, and they are looking for narcotics. If someone comes to your door asking for expired prescriptions, you may want to contact your local police. If you do have expired prescriptions, especially if they’re opioids, you can take them to many pharmacies which do have drug disposal programs. It is also recommended that you can dispose of them in the trash if you mix them with something unpleasant like used cat litter or coffee grounds.

  ***

  Hopefully, these scams won’t come to your area, but if they do, you’re now better prepared for them.

   
• 

  Geebo 8:00 am on April 27, 2022 Permalink | Reply
  Tags: Microsoft, remote access ( 6 ), Scams ( 1,354 ), tech support scam ( 49 )   

  Tips to detect the tech support scam 

  

  By Greg Collier

  Yesterday, we discussed how the jury duty is one of the most common and well-known scams, yet it still continues to find victims. Today’s scam is another scam like that, and it’s the tech support scam. This is where you’re using your computer and an invasive message pops up saying that your computer has been compromised.

  These pop up messages can even prevent you from closing any windows or shutting down your computer. The messages claim to be from some well-known tech company like Microsoft or McAfee and that you need to call them right now at the number they’ve provided. However, the customer service number provided is a fake, and instead leads you to scammers posing as one of these companies. Before you know it, you’ve lost thousands of dollars to a scammer for some phony service you didn’t need to begin with.

  A woman from Baltimore almost fell for one of these scams. She states that a message that appeared to come from Microsoft popped up on her husband’s Google Chromebook. This should have been a red flag that this was a scam, but not everyone knows the ins and outs of computer operating systems. If you’re using a Chromebook that runs Google’s Chrome OS, then why is Microsoft, who make Windows 10 and 11, letting you know about a problem on a competitor’s system? The same would go for an Apple Computer. Microsoft would not tell you about a problem on your iMac or MacBook.

  Getting back to the story, the woman called the number and was told to download an app that would let the phony technical support rep have remote access to her computer. This is another giant red flag. Letting anyone you don’t know personally have access to your computer is always a bad idea. This allows bad actors to go through all the personal files on your computer. Much of this information can be used in identity theft or selling your identity to identity thieves.

  The scammer then told her that there was fraudulent activity on the woman’s bank account and that she needed to move her money to avoid further fraud. She was then asked for the customer service number from the back of her debit card and that the phony rep was going to connect her to her bank and help her move the money. Of course, the bank rep was just another scammer. It wasn’t until the woman was asked to send a copy of her driver’s license when she said she felt uncomfortable and terminated the call. Luckily, she didn’t lose any money.

  If you think about it, even the pop-up messages that overtake your screen are a tip off to a scam. Real word hacks and viruses are designed to be undetected. It’s their purpose to remain as hidden as possible to collect as much information as possible or cause as much damage as possible before being detected.