{"id":12320,"date":"2018-05-17T08:10:13","date_gmt":"2018-05-17T16:10:13","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2018\/05\/17\/news-6089\/"},"modified":"2018-05-17T08:10:13","modified_gmt":"2018-05-17T16:10:13","slug":"news-6089","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/05\/17\/news-6089\/","title":{"rendered":"Fake Malwarebytes helpline scammer caught in the act"},"content":{"rendered":"

Credit to Author: Charles Campenni| Date: Thu, 17 May 2018 15:00:00 +0000<\/strong><\/p>\n

An estimated one in every 10 American adults lost money in a cyber scam in the past 12 months, according to a report released by the FTC earlier in the month. On average, each scam victim lost $430, totaling about $9.5 billion overall.<\/p>\n

To put this in perspective, that\u2019s over 22 million Americans scammed for $26 million a day, more than $1 million an hour, $18,000 per second.<\/p>\n

No one is immune, and now more than ever there is a need to be vigilant. Being taken by a scam can ruin lives or damage the reputation of legitimate companies. No one is excluded\u2014not Amazon, Dell, Malwarebytes, or you.<\/p>\n

In the example below, we\u2019ll show how scammers Blue Eye Ventures, LCC, tried to imitate Malwarebytes in order to trick people out of money. Now, more than ever, it\u2019s important to be vigilant in order to tell the good guys from the bad.<\/p>\n

Malwarebytes helpline scam<\/h3>\n

Using a modern web design aesthetic, Blue Eye Ventures makes a reasonably good impression of a company looking to help its clients. They advertise that they are a Malwarebytes helpline. But they are not.<\/strong><\/p>\n

\"\"<\/p>\n

In order to catch these guys in the act, I called the toll-free number asking for help, telling them I wasn’t sure my Malwarebytes software was working properly. I allowed the technician to have access to my computer. He opened up my Malwarebytes software.<\/p>\n

\"\"<\/p>\n

I’m sorry sir, this is fake software<\/h3>\n

The technician on the phone advised me that the (legitimate) Malwarebytes software I was running was fake. Now, I knew that it was not fake. I ran it minutes earlier and it worked perfectly.<\/p>\n

Next thing I knew, he ran a tree command. Tree is a recursive directory<\/a> listing program that produces a depth-indented listing of files. This is not a diagnose tool.<\/p>\n

\"\"<\/p>\n

These are the results he produced:<\/p>\n

\"\"<\/p>\n

At the bottom of the tree command, he typed \u201cSecurity Breach\u201d to scare me into believing that my computer was being hacked.<\/p>\n

More scare tactics<\/h3>\n

He then checked my System Configuration:<\/p>\n

\"\"<\/p>\n

The tech told me that all my software wasn\u2019t running. “It’s stopped.” This was to scare me into believing that my system wasn\u2019t working. Again, he wasn\u2019t using any tools to diagnose hacking or infections.<\/p>\n

He then pulled up Resource Monitor:<\/p>\n

\"\"<\/p>\n

The tech asked me, \u201cDo you know what crss.exe means?\u201d I told him I don\u2019t, even though I do.<\/p>\n

The csrss.exe file located in C:WindowsSystem32 is a real file, and removing it will cause problems with your PC. If someone tells you it’s a virus, that\u2019s a hoax.<\/p>\n

Case in point, to further scare me into believing my computer was infected, the tech asked me to read the description he pulled up on Google about the csrss.exe file being a Trojan horse or virus.<\/p>\n

\"\"<\/p>\n

The Google result pulls information from an unreliable and untrustworthy source. For example, the article linked here recommends users remove this “malware” from their Mac systems. Any file with .exe is a Windows executable.<\/p>\n

Meanwhile, the scammer\u00a0still<\/em> hadn’t checked my system with any real tools to find problems. He was only there to scare me into purchasing his plans.<\/p>\n

Do not purchase<\/h3>\n

Below are the plans he offered me, from one year of support for $200 to a lifetime plan for $700. I was instructed to pay Blue Eye Ventures, LLC, by check. Or I could use my credit card at Easy-installatio.com (phone number +120-3354649). This is a Canadian number\u2014and Malwarebytes\u2019 HQ is in the United States.<\/p>\n

\"\"<\/p>\n

How do you think a real customer would feel? They purchased Malwarebytes and now they are being told that they purchased phony software, their computer is infected, and it’s going cost them hundreds of dollars to repair. Scammers are not only ruining the reputation of legitimate companies, but they are ripping customers off in the process.<\/p>\n

At Malwarebytes, we are always working to expose fraud and educate consumers. We will never sell phony software. We will never charge you hundreds of dollars to fix your computer. And we will teach you how to spot the companies who do.<\/p>\n

The post Fake Malwarebytes helpline scammer caught in the act<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Charles Campenni| Date: Thu, 17 May 2018 15:00:00 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
In this blog, we take you through a phone call to a fake Malwarebytes helpline run by Blue Eye Ventures, and show you how to spot the scam in action.<\/p>\n

Categories: <\/p>\n