maravis.com Exploring Information Security

Wednesday, February 22, 2012

  • Aug 2011
    22

    Email This Post  Print This Post

    Have you fallen for the Microsoft support phone scam?

    I received a call this morning from someone claiming to be from Microsoft who told me that my computer was sending them a message that it was infected with a computer virus. He wanted me to give him remote access to troubleshoot and remove the offending virus.

    It was plain to me that this was a scam since I scan all my computers and our staff are very particular about keeping our systems clean and scanned regularly. When I did a search, I found that Microsoft had already put out a warning about this kind of scam. Also, Microsoft is in the business of making money. They do not give away customer support away for free (in most cases).

    Quite a few people seem to have already fallen for this scam and taken for hundreds of dollars.

    So, what do you do if you did get fooled into providing information and remote access to these scam artists? Well, here you go:

    1. Let this be a lesson to you. Never provide information to a stranger who initiates the call. If you called Microsoft or any other organization, that is different. You know who you have reached. If you received a call, you have no idea who the person on the other end is.
    2. Report it to the cops. Most police departments have an electronic crimes group. Remember that they do have to investigate more serious crimes and your few hundreds of dollars is not very high priority to them. While they may not act on one or two complaints, they may have to if enough people complain.
    3. Use a different computer (or a trusted friend’s or family member’s) and change all your bank/financial institution/credit card account passwords. Make sure that you set a strong unique password.
    4. Change your router password and make sure that remote web administration on the router is disabled.
    5. Regularly monitor your credit card accounts and bank accounts and raise any suspicious transactions with the institution right away. If you provided your credit card information to the caller, get your card replaced
    6. Disable remote access on your computer.
    7. Download and run Microsoft Safety Scanner. And run this regularly for at least a few weeks. You should be running a full scan of your computer(s) at least every week and keeping your anti-virus program up to date.
    8. This step is for protection in the future, so you do not have to do it right away. Download and install Microsoft Security Essentials. This is free from Microsoft and is pretty good.

    Hopefully, with all these done, you will be in the clear. Be suspicious and safe the next time.

    Here is some additional information from Microsoft.


    by Siva Ram, CISA, PCI-QSA, PA-QSA
    ©www.maravis.com. The use of this content on other websites without permission breaches copyright.