Dr. Eowyn posted: "Yesterday, in the midst of a rather harrowing day and
while I was cutting up veggies for dinner, the phone rang. "Hello, I am
calling from Windows support. We have determined your computer has been
infected and we are here to help you. Are you at your " Respond to this
post by replying above this line
New post on *Fellowship of the Minds*
<http://fellowshipoftheminds.com/author/eowyn2/> Beware of cold calls from
“Windows Technical Support” – It’s a
scam<http://fellowshipoftheminds.com/2013/11/02/beware-of-cold-calls-from-windows-technical-support-its-a-scam/>
by
Dr. Eowyn <http://fellowshipoftheminds.com/author/eowyn2/>
Yesterday, in the midst of a rather harrowing day and while I was cutting
up veggies for dinner, the phone rang.
"Hello, I am calling from Windows support. We have determined your computer
has been infected and we are here to help you. Are you at your computer? If
not, go to your computer now," said a male voice with a heavy Indian (as in
India in Asia) accent.
At once alarmed and wondering at the same time how on earth Windows:
1. somehow knew I have Windows7 on my laptop; and
2. also knew that I've been having some "issues" with the laptop (who
doesn't have "issues" with their computers?)
I quickly wiped my hands on a kitchen towel and dashed to open my laptop.
I asked for the name of male heavily-accented Indian voice. He said his
name is "Max Watson," which is so obviously NOT his name, it was laughable.
Anyway, "Max Watson" said he'll show me what's infecting my computer. I
followed his instructions and pressed the “Windows” and “R” keys together
to get to the Windows Run dialog box. I then typed "eventvwr" in the bar,
which then opened the Window’s Event Viewer:
[image:
eventcmd]<http://cdn.blog.malwarebytes.org/wp-content/uploads/2013/04/eventcmd.png>
Next, "Max Watson" told me to click "OK," then "Custom Views," then
"Administrative Events," which brought me to an alarming sight. Below is a
screenshot I took of my laptop's "Event Viewer," on which I've painted
three red circles:
1. The biggest red circle surrounds "Administrative Events"
2. The medium-sized red circle surrounds "Number of events": Yikes! My
'puter has had 10,608 "events"!!!!
3. The smallest red circle surrounds the first two of those 10,608
"events" and both carried the *! Error *message. Yikes!!!!
[image: Administrative
Events]<http://fellowshipofminds.files.wordpress.com/2013/11/administrative-events.jpg>
"Max Watson" said in order for him to remove the malware that some hacker
had snuck into my computer, he would have to gain remote access of my
laptop. That means he would be able to see everything I have on my
computer, including what's on my desktop and stored in my hard-drive.
Everything.
At that, all the alarm bells in my head rang off.
So I ask Max Watson (MW): "But how do I know you really* are* from Windows
Technical Support?"
MW first prattled on about how he really is from Windows and I must trust
him and that he just wanted to help me. Blah, blah, blah.
I was undeterred and repeated my question.
So MW gave me a phone number to call to verify he's really "Max Watson"
from Windows Support: (866) 539-8674. MW even gave me his employee ID
number 5065!
I said: "But how do I know the 866 number you give me actually *is* a
Windows number?"
MW gave me the same spiel about needing to trust him, etc. etc.
So I called the 866 number. Another male heavily-accented Indian voice
answered, who immediately knew who I was -- that I was the person who had
been speaking to "Max Watson". Curiously, throughout my conversation with
"Max Watson," he never once referred to me by my name.
I asked second male Indian voice for his name. He replied: "David Watson."
I said: "You have the same last name as Max Watson! Are you related?"
"David Watson" (DW) said, sounding irritated: "No, we are not."
I said: "I find it hard to believe that it just so happens that I'm dealing
with two Windows Support technicians whose last names are the same!"
DW, sounding more irritated: "It's a coincidence."
I said: "You don't seem to understand the problem I'm having: I didn't call
Windows; you guys called me. And you're asking to gain remote access to my
computer. How do I know that this 866 phone number is legit? If I go online
to look up the phone number for Windows Support, will I get this 866
number?"
DW, sounding even more irritated: "No, you won't, because we are a special
high-level Windows tech support team."
Then DW became angry and started threatening me -- that if I don't let him
help me, those nasty "hackers" who'd already "hacked" into my computer will
gain access to everything, including my identity, and will do nasty
criminal things by stealing my identity . . . .
I told DW I don't appreciate him threatening me and asked to speak to DW's
supervisor.
While I was waiting, I scrolled down the 10,608 "events" on my Windows
"Event Viewer" and discovered - SURPRISE! -- that the 10,608 "events" go
all the way back to the first "event" on 9/3/2009 when I first purchased my
laptop.
So if those alarming "! Error" events indicate some hacker had recently
hacked into my laptop, how come those events date back FOUR YEARS?
I also conducted a quick Internet search for "Windows7 cold call" and guess
what I found! -- an NBC News Technology article by *Frank Catalano*, "'We're
with Windows': The anatomy of a cold-calling
scam<http://www.nbcnews.com/technology/were-windows-anatomy-cold-calling-scam-6C10631331>,"
which described everything that I had just experienced with "Max Watson"
and "David Watson."
When a third male less-heavily-accented Indian voice came on the line,
identifying himself as "Peter," this is what I told "Peter":
"I want you to stop calling me. I know all about your scam and will be
reporting you to the authorities."
Then I hung up.
After Catalano's encounter with the fake Windows Tech Support scammers, he
contacted Windows and this is what Windows told him:
*“In 2010, Microsoft began receiving
<http://blogs.msdn.com/b/securitytipstalk/archive/2010/03/09/don-t-fall-for-phony-phone-tech-support.aspx>
reports of scammers making phone calls or sending emails to people,”
replied a spokesperson for Microsoft’s Digital Crimes Unit. The goal was
often to trick people into buying support services, downloading fake
security software or allowing remote access to their PC for likely un-nice
purposes. Microsoft has referred the cases to the Federal Trade Commission,
which had its own investigation underway and presumably still does.*
*And yes, it’s no coincidence I’m getting a lot of these calls. A lot of
people
<http://www.microsoft.com/en-us/news/press/2011/jun11/06-16MSPhoneScamPR.aspx>
are. [...] we have seen an increase in cybercrimes that use deception and
social engineering to exploit people.”*
Phone scammers call the wrong guy, get mad and trash
PC<http://blog.malwarebytes.org/fraud-scam/2013/04/phone-scammers-call-the-wrong-guy-get-mad-and-trash-pc/#>
Please send this post to everyone on your email list, post a link on
Facebook, Twitter, etc.
*~Eowyn*
*Dr. Eowyn <http://fellowshipoftheminds.com/author/eowyn2/>* | November
2, 2013 at 1:05 pm | Tags: Administrative
Events<http://fellowshipoftheminds.com/?tag=administrative-events>,
cyber crime <http://fellowshipoftheminds.com/?tag=cyber-crime>, Event
Viewer<http://fellowshipoftheminds.com/?tag=event-viewer>,
Frank Catalano <http://fellowshipoftheminds.com/?tag=frank-catalano>,
hacker<http://fellowshipoftheminds.com/?tag=hacker>,
Internet fraud <http://fellowshipoftheminds.com/?tag=internet-fraud>,
Microsoft <http://fellowshipoftheminds.com/?tag=microsoft>, Windows
scam<http://fellowshipoftheminds.com/?tag=windows-scam>| Categories:
conspiracy <http://fellowshipoftheminds.com/?cat=11808>,
crime<http://fellowshipoftheminds.com/?cat=34945349>,
Science & technology <http://fellowshipoftheminds.com/?cat=1749> | URL:
http://wp.me/pKuKY-nXP
Comment<http://fellowshipoftheminds.com/2013/11/02/beware-of-cold-calls-from-windows-technical-support-its-a-scam/#respond>
See all
comments<http://fellowshipoftheminds.com/2013/11/02/beware-of-cold-calls-from-windows-technical-support-its-a-scam/#comments>
Unsubscribe<https://subscribe.wordpress.com/?key=7f89380f46003915c34c2cdd2b126a38&email=bovinescatologists%40gmail.com&b=ffCe%26zi%2CyR2-kEtl9S4fqNCuGqiEtHHzY%3FECuo5%26%2FDHjfLKCT%5D>to
no longer receive posts from Fellowship of the Minds.
Change your email settings at Manage
Subscriptions<https://subscribe.wordpress.com/?key=7f89380f46003915c34c2cdd2b126a38&email=bovinescatologists%40gmail.com>.
*Trouble clicking?* Copy and paste this URL into your browser:
http://fellowshipoftheminds.com/2013/11/02/beware-of-cold-calls-from-windows-technical-support-its-a-scam/
Thanks for flying with WordPress.com <http://wordpress.com>
--
--
Thanks for being part of "PoliticalForum" at Google Groups.
For options & help see http://groups.google.com/group/PoliticalForum
* Visit our other community at http://www.PoliticalForum.com/
* It's active and moderated. Register and vote in our polls.
* Read the latest breaking news, and more.
---
You received this message because you are subscribed to the Google Groups
"PoliticalForum" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
