• The move to the new server is done. There are some software and database maintenance updates in process. This has us passing the hat around to help out. We appreciate any donations. Seriously, even a dollar helps. The payment page may be found here - https://www.audiokarma.org/support.html

A warning for internet users

jhoak

Super Member
Friday night I got a call from a friend of mine telling me that he was having some computer "issues". I talked to him the next day and got the story...

He had received a phone call from the "Microsoft Support Group". At least that's what his caller-ID displayed. He said the caller sounded legitimate and directed him to a web site. Near as I can tell from there they were able to install a remote access app and basically hijacked his PC. The next thing he knew EVERYTHING on his PC, every application, every file, and every menu was password protected. They're answer was cough up nearly $400 and you can have your computer back. He did the right thing and hung up the phone and pulled the plug on the PC.

Yea... I know... He did something pretty freaking dumb but it shows just how convincing these con artists can be. He's a fairly clever guy but "Joe Average" when it comes to computer skills. If he can get suckered in by this scam then so can many if not most folks out there.

I'll be looking at his PC in a few days. Depending on how well this hijack is written (I've seen a BUNCH of them) I may or may not be able to recover his data or OS. My guess (without seeing it) is that it's toast and he's looking at an OS reinstall and a total data loss. I've been watching this type of hijack (known as ransom ware) become more and more sophisticated over the last few years.

SO... Here's the straight poop on phone calls from the "Microsoft Support Group" or ANY like call. Microsoft will NEVER call you for any reason unless you call them first and request a callback. If your phone rings and the caller-ID displays anything of the like you have exactly two options (1) Ignore the call or (2) Answer and unleash and endless stream of obscenities and continue until they hang up on you. I've never received one of these calls but if I ever do I'll opt for number 2.

Tell your friends. Tell your family. This is some serious SH!T and people are being scammed out of real $$ just because they're not very computer savvy.

P.S. I've been actively using PCs for more than 30 years either as a hobbyist or for a living. For the last 20+ years as an IT professional. I have a full alphabet of "letters" behind my name on my business cards. Lately all of those certs and a dollar will buy me a bad cup of coffee at the local 7-11 on a good day. I've been doing this for a while. I haven't seen it "all" but I've sure seen most of it.
 
Register to hide this ad
I guess I'm lucky, 'cuz a call like that would peg my suspicion meter in a hurry. We don't have caller ID, so I find out who's calling when I answer the phone. Cool thing is, my phone has an off button, and I don't hesitate to use it when I don't know the caller or the reason for the call.

A guy called to tell us we had won a free Cadillac once. My wife told him he'd have to deal with our receiving agent and gave him the phone number for the Hempstead County Sheriff's Office.
 
A friend of mine just had her PC hijacked a few days ago. Not only did they put a password on her OS, but also her motherboard. When I tried to open the bios to get it to boot on CD, it asked for a password there too. Battery removal fixed that one though.
 
could you not just access his files by connecting hd to a linux machine ? assuming you cant simply take the computer back over
 
I dealt with someone who installed a fake antivirus that hid all their files. No passwords, though, so I was able to get everything back.
 
It would really peg my suspicion if Microsoft called me. I mean come on and think critically for a second. I for one have never given them my phone number...
 
A friend of mine just had her PC hijacked a few days ago. Not only did they put a password on her OS, but also her motherboard. When I tried to open the bios to get it to boot on CD, it asked for a password there too. Battery removal fixed that one though.

YEP... I've seen that one (and know the fix) too. What bothers me about that particular hijack is I can't figure out how it's being done. Typically CMOS code is well outside of the OS's reach. Or at least it "should" be in my opinion. When you let the OS have access to BIOS code you're asking for trouble

I probably know more of the "black hat" stuff than I should. It's just that I always believed in the phrase "know thine enemy". If I know well how they're going to try to hack my systems then I know well how to defeat them.
 
I had a call the other day from them ,I had her repeat herself 3 or 4 times.her name was Sarah,after the fourth time I said "Sarah so glad you found a job" and hung up!
 
There is an agency of the US Federal Government that has begun looking into this because the practice has become so widespread and so common.

I will not name which agency, as the investigation is not formalized as of yet.

I know of one person whose experience with these people cost $700 and problems are not yet resolved.

Sometimes the callers say they are with Dell, Lenovo, etc.; not just Microsoft...

Interestingly one very active bunch of jerks call using a phone number displaying a "718" (New Jersey) area code, even though all the callers are obviously from India
 
It would really peg my suspicion if Microsoft called me. I mean come on and think critically for a second. I for one have never given them my phone number...

Exactly. First question - How did you get this number? The answer better make sense and be specific.
 
YEP... I've seen that one (and know the fix) too. What bothers me about that particular hijack is I can't figure out how it's being done. Typically CMOS code is well outside of the OS's reach. Or at least it "should" be in my opinion. When you let the OS have access to BIOS code you're asking for trouble

I was wondering that too, but a lot of motherboards now do have management programs for the OS. Mainly for overclocking, so I'm not sure if you can edit the BIOS password through a legit program like that.
 
could you not just access his files by connecting hd to a linux machine ? assuming you cant simply take the computer back over

I have any number of tools at my disposal (most linux based) that will allow me to recover or remove passwords at the OS level.

Unfortunately there aren't many that are effective against "encrypted" and passworded files.

Cracking an OS level password is easy. An encrypted file not so much. I still have files on my PC which I haven't been able to open because I forgot the password.

At the file level most of the cracking tools rely on "brute force" efforts. This means trying every possible combination of letters and numbers until you find the password.

Because I have a background in computer security my passwords tend to be VERY difficult to crack. Typically a 10 (or more) digit combination of letters (upper & lower case), numbers and puncuation. A typical password for me will be something like #fR&acK11*. One of my favorites (which I no longer use) is @tH34oR$uR0d!n0N.

You have to understand my perspective about passwords. At one of my previous jobs if you had a valid username and password you had access to a check printer (that even signed them) and over $600 million dollars spread across a number of accounts.

To this day I have keys to the office and admin level access to ALL of their systems. I guess they trust me.
 
Last edited:
A guy called to tell us we had won a free Cadillac once. My wife told him he'd have to deal with our receiving agent and gave him the phone number for the Hempstead County Sheriff's Office.

I've got to remember that one.:D
 
Doesn't anyone do backups anymore?
Ray

Sadly... No

In spite of the fact of SO many amazingly cheap and easy options.

I think I've made more $$ after an "oh crap" moment than anything else in my 20+ year carreer in IT.

I'm kind of "old school" about my data. Mine exists in no less than 3 different "physical" places here and 2 different "cloud" locations.

I got "bit" by that dog many years ago. He won't bite me ever again.
 
i'm not real techie but i keep two external copies of everything. HD's are just to cheap, even if the market is inflated post flooding. For us linux users we have Krusader. freaking awesome program program for keeping folders up to date and more. i don't trust the cloud though.
 
The more places that I don't have to trust with my stuff the happier I am.

Right this minute my music, pictures, documents, and spreadsheets exist at least 5 different places. 3 "physical" and 2 "cloud".

If my whole world were to go to crap tomorrow (data wise) I'm confident that I could put it back together in a matter of minutes. OK... Probably hours. I have a LOT of stored music.
 
Back
Top Bottom