{"id":1553,"date":"2018-12-12T18:47:02","date_gmt":"2018-12-12T18:47:02","guid":{"rendered":"http:\/\/www.brett-tek.com\/?p=1553"},"modified":"2018-12-12T18:51:51","modified_gmt":"2018-12-12T18:51:51","slug":"article-popup-scammers-plan-of-attack","status":"publish","type":"post","link":"https:\/\/www.brett-tek.com\/?p=1553","title":{"rendered":"ARTICLE: Popup Scammers’ Plan of Attack"},"content":{"rendered":"\n

More common to encounter than viruses these days are scammers; they\u2019re not interested in infecting or damaging your PC, but in taking your money.  There\u2019s a typical plan of attack scammers follow, and the sooner you realize it\u2019s a scam the less costly damage control will be.<\/p>\n\n\n\n

STEP 1: Getting You to Call Them (fearmongering and lies)<\/h3>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n

The most typical method scammers use for you to call them is\nthrough a pop-up window that appears while you\u2019re browsing the Internet.  Often through clicking innocently enough on\nadvertisements or \u201cclick bait\u201d articles, you will go to a site that then\nproduces a concerning pop-up message.<\/p>\n\n\n\n

At this stage, you\u2019re likely not infected by anything.  Whatever the pop-up is saying is simply a\nscare tactic to make you react right away. \u201cDon\u2019t call your local technician, don\u2019t\ncall a family member or friend, just call us right now!\u201d<\/p>\n\n\n\n

The pop-up is often a \u201csticky\u201d one that doesn\u2019t easily close and sometimes has an audible message speaking. Though there are more advanced ways to forcefully close the offensive window, sometimes you can resolve this by simply restarting Windows.  Once Windows starts back up, reload the web browser.  Depending upon how it\u2019s setup the browser may ask if you want to reopen\/restore websites you were previously in.  Do NOT!  Return to your normal homepage and everything should be right with the Internet once more.<\/p>\n\n\n\n

STEP 2: Let Them Remotely Connect to Your PC (the foot in the door)<\/h3>\n\n\n\n

If you do call the phone number, you\u2019ll be in touch with a scammer who\u2019s first task will be to get you to let them connect onto yourPC.  The software they use varies and is often legitimate software; but, as with any tool, in the wrong hands it can do great harm.  In this case, you have now given a scammer significant access to your PC. They can see your screen, move your mouse, and perform other tasks in the background.<\/p>\n\n\n\n

The problem at this stage and onward is that even if you decide this is a scam and hang up on them, they\u2019re still on your PC. Even if you turn your computer off or disconnect the Internet, the software may still be installed. When you inevitably power back on and reconnect to the Internet, the remote software will still be there, waiting to automatically re-establish a connection back with the scammers.<\/p>\n\n\n\n

STEP 3: Convince You There’s Something Wrong on Your PC (& that only they can fix it)<\/h3>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n

The \u201cpeople skills\u201d of the scammers vary, but their ultimate goal once connected to your computer is to convince and reaffirm to you that there\u2019s something wrong with your PC, that they\u2019re the only ones who can fix it, and that it must be addressed immediately. This all plays into keeping the momentum moving towards their end goal, and the less time you get to second-guess your decisions or what they\u2019re doing on your PC the better it is for them.<\/p>\n\n\n\n

The scammer may look like they\u2019re performing initial scans or checking log files all in an attempt to play the part of a diagnosing technician.  Even if there is a legitimate issue with your PC and the scammer acknowledges it, that only helps their end goal; but that goal isn\u2019t to fix your computer.<\/p>\n\n\n\n

STEP 4: Getting Your Credit Card Info (damned if you do, damned if you don’t)<\/h3>\n\n\n\n

This is what the scammer has been leading you to: getting your credit card information and paid. They may offer a flat or annual charge and provide you with contact information (typically in a text file on your desktop screen).  You are in the scammer\u2019s endgame, and it\u2019s possible that either decision you make here will have negative consequences.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

If you provide your credit card information, they will charge you and leave.  They\u2019re job is done, and they\u2019ll typically just move on to the next person that calls the phone number from the pop-up scam message.  The remote software they used will likely remain on your PC giving them the ability to remotely reconnect.<\/p>\n\n\n\n

If you refuse to provide your credit card information, things can get dicey.  The scammer usually becomes more aggressive and may cause problems on your PC.  Remember, your computer is in a compromising position with them currently on it with significant access to do some damage.  The remote software they\u2019re using is still active even if you hang up on them.<\/p>\n\n\n\n

What Can You Do?<\/h3>\n\n\n\n

Don\u2019t call the phone number<\/strong>. The pop-up message is a lie. You may need assistance removing the message, but don\u2019t ask the scammers for that help.<\/p>\n\n\n\n

Don\u2019t let them onto your PC<\/strong>.  OK, so you called the number.  Don\u2019t bother talking to or convincing them that your PC is fine or that what they\u2019re doing is wrong.  Think of them as drug dealers: for them it\u2019s just a business, and you\u2019re wasting your time trying to make them feel bad about it.  Just hang up.<\/p>\n\n\n\n

Don\u2019t give them your credit card information<\/strong>.  OK, so you let them onto your computer.  It\u2019s best to follow the old adage to \u201cnever negotiate with terrorists or give them what they want\u201d.  Immediately power-off your PC by pressing and holding the power button for 5-10 seconds.  Yes, it\u2019s not a recommended method, but this is an emergency and you want to severe the connection the scammers have with your PC right away. Leave the computer off and call BRETT-TEK<\/a>.  The remote software that the scammers used must be removed before the system is reconnected to the Internet.<\/p>\n\n\n\n

A Story of a Scammed Client<\/h3>\n\n\n\n

Here\u2019s a clip of me describing an experience I had with aclient and his PC when an aggressive scammer decided to do more than just \u201cfix\u201d his computer.<\/p>\n\n\n\n

\n