Windows Security Alert Attack

We had a customer almost get scammed by a browser window attack, so we are posting this warning. The customer has security training and questions everything, so the fact they almost got tricked it could happen to anyone. Here is how they almost got scammed.

• User followed a link from Google’s search results for a manual on their new monitor.
• They clicked on the “Table of Contents” of this webpage and got the sudden, alarm sounding popup window.
• The customer has seen these before; however, this one really looked official. They called the number on the screen.
• The person on the other end answered as Agent so-n-so a Microsoft Security Officer.
• After sometime the person convinced our user to connect to their machine.
• They used the “Run” command an ran a script that they said showed where the malware was installed. He said he was sending him to the FTC.
• Another person answered the phone and took down the information.
• They sent our customer a Nondisclosure Agreement, but the customer wouldn’t sign it. It was also on “Department of Justice” letterhead.
• The attackers were insisting on protecting our customer’s money and was asking for the customer to cash some bonds.
• The customer was smart and agreed to meet them in person, but only at a police station. I believe this is where the conversation ended. This was a smart move.

We are wiping the machine and reinstalling the operating system. Moral of the story is stay vigilant. The attacks are getting complex and convincing.

One of the best ways to overcome the initial browser attack it to hit “ctrl + alt + delete“, choose the “Task Manager“, and then select the browser and hit “End task“.

Let us know if this helped you…