{"id":15122,"date":"2019-04-18T05:30:01","date_gmt":"2019-04-18T13:30:01","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/04\/18\/news-8871\/"},"modified":"2019-04-18T05:30:01","modified_gmt":"2019-04-18T13:30:01","slug":"news-8871","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/04\/18\/news-8871\/","title":{"rendered":"The perils of fake technical support"},"content":{"rendered":"<p><strong>Credit to Author: Tatyana Sidorina| Date: Thu, 18 Apr 2019 09:40:07 +0000<\/strong><\/p>\n<p>Large companies and their clients are regularly targeted by online scammers. The attacks can be of any kind and level of complexity, ranging from random phishing to artful schemes. One of the most common online frauds in recent years has been fake technical support.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053032\/fake-technical-support-featured.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053032\/fake-technical-support-featured.jpg\" alt=\"Dangers of fake technical support sites and social network accounts\" width=\"1460\" height=\"960\" class=\"aligncenter size-full wp-image-26502\" \/><\/a> <\/p>\n<p>Links to fake technical support sites, accompanied by rave reviews, can be encountered both on forums dedicated to a particular issue and on social networks. In social media, you might even stumble upon one of the huge number of fake Kaspersky Lab support accounts out there.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053026\/fake-technical-support-1-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053026\/fake-technical-support-1-EN.png\" alt=\"A fake Kaspersky Lab technical support account on Twitter\" width=\"1018\" height=\"768\" class=\"aligncenter size-full wp-image-26501\" \/><\/a> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053041\/fake-technical-support-2-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053041\/fake-technical-support-2-EN.png\" alt=\"Another fake Kaspersky Lab technical support account on Twitter\" width=\"1014\" height=\"910\" class=\"aligncenter size-full wp-image-26503\" \/><\/a> <\/p>\n<p>All of these profiles have one thing in common: They claim to offer assistance in any matters related to company products, with specially trained, highly qualified technical support staff supposedly ready and waiting to deal with user issues. Needless to say, it is not free.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053103\/fake-technical-support-3-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053103\/fake-technical-support-3-EN.png\" alt=\"The fanciest fake Kaspersky Lab technical support account we found on Twitter\" width=\"1110\" height=\"890\" class=\"aligncenter size-full wp-image-26504\" \/><\/a> <\/p>\n<p>Being deceived is unpleasant enough, but that&#8217;s only half the trouble. Worse is the way that fake support services &#8220;solve&#8221; user problems. For example, here is a website that prompts the user to enter their account details to run a virus scan (you should never do that).<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053114\/fake-technical-support-4-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053114\/fake-technical-support-4-EN.png\" alt=\"This fake Kaspersky Lab support website prompts for account information, supposedly to run a virus scan\" width=\"1728\" height=\"955\" class=\"aligncenter size-full wp-image-26505\" \/><\/a> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053135\/fake-technical-support-5-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053135\/fake-technical-support-5-EN.png\" alt=\"A fake virus scan on a fake Kaspersky Lab technical support site\" width=\"1358\" height=\"1002\" class=\"aligncenter size-full wp-image-26506\" \/><\/a> <\/p>\n<p>At 73%, the scan suddenly stops (tests on different devices show that it&#8217;s always 73%), after which &#8220;technical support&#8221; prompts: &#8220;Upgrade your security.&#8221; Clearly, the calculation is that the user, on seeing the warning, will call &#8220;technical support&#8221; for help with this upgrade.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053155\/fake-technical-support-6-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053155\/fake-technical-support-6-EN.png\" alt=\"The fake virus scan always stops at 73%\" width=\"1877\" height=\"961\" class=\"aligncenter size-full wp-image-26507\" \/><\/a> <\/p>\n<p>Unfortunately, we were unable to ascertain what precise information the victim is asked to reveal during the call, because a short while after we detected the site, the details under the Contacts tab suddenly vanished. So we can only guess at what the victim might lose as a result of this &#8220;assistance.&#8221;<\/p>\n<p>Here&#8217;s another site where in addition to personal information, the user is cheekily asked to enter the Kaspersky Lab product activation code.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053215\/fake-technical-support-7-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053215\/fake-technical-support-7-EN.png\" alt=\"This fake Kaspersky Lab support website prompts for the user's antivirus activation code\" width=\"1625\" height=\"940\" class=\"aligncenter size-full wp-image-26508\" \/><\/a> <\/p>\n<p>After the user enters the information, an error message points to various &#8220;problems,&#8221; and the user is once again asked to contact &#8220;technical support&#8221; by phone.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053230\/fake-technical-support-8-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053230\/fake-technical-support-8-EN.png\" alt=\"This fake Kaspersky Lab technical support website offers to resolve \"issues\" over the phone\" width=\"1448\" height=\"950\" class=\"aligncenter size-full wp-image-26509\" \/><\/a> <\/p>\n<p>A simple search on the phone number provides everything you need to know about the service. Examining the search results, we found that this number is used to deceive not only Kaspersky Lab users, but other companies&#8217; users as well.<\/p>\n<p> <a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053239\/fake-technical-support-9-EN.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/04\/18053239\/fake-technical-support-9-EN.png\" alt=\"The check showed that the same number is used to scam users of several companies\" width=\"790\" height=\"270\" class=\"aligncenter size-full wp-image-26510\" \/><\/a> <\/p>\n<p>In the course of our small investigation, a large number of similar resources were blocked. But banning all such sites is not feasible. As long as this type of activity remains profitable, fake technical support sites will continue to mushroom. Here are some simple tips to help avoid &#8220;support professionals&#8221; of this kind:<\/p>\n<ol>\n<li>If product issues arise, use only official support services. Only there will you get expert help and answers to your questions.<\/li>\n<li>In social networks, always check if accounts are official \u2014 look for a blue badge next to the account name for verification.<\/li>\n<li>If you were recommended a support website, or found it yourself online, take the time to do some digging. Sometimes just googling the website&#8217;s name will suffice.<\/li>\n<li>You can also <a target=\"_blank\" href=\"https:\/\/www.nic.com\/whois\/?searchWord=kaspersky.com\" rel=\"noopener noreferrer\">check who the website address is registered to<\/a>. If instead of the reputable company you were expecting, the address is registered to an obscure entity, let alone an individual, the website is bound to be fake.<\/li>\n<li>Kaspersky Lab does everything it can to safeguard users against such resources: <a href=\"https:\/\/www.kaspersky.com\/internet-security?redef=1&#038;reseller=gl_kdailyplacehold_acq_ona_smm__onl_b2c_kasperskydaily_wpplaceholder____kismd___\" target=\"_blank\">All of our products<\/a> provide built-in protection against potentially dangerous websites, including all of the fake technical support sites that we discovered.<\/li>\n<\/ol>\n<p> <input type=\"hidden\" class=\"category_for_banner\" value=\"kis-trial-cyberattacks\" \/> <br \/><a href=\"https:\/\/www.kaspersky.com\/blog\/fake-technical-support\/26500\/\" target=\"bwo\" >https:\/\/blog.kaspersky.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Tatyana Sidorina| Date: Thu, 18 Apr 2019 09:40:07 +0000<\/strong><\/p>\n<p>Fake technical support websites and accounts in social networks pose a real danger. How to spot and avoid them.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10425,10378],"tags":[9751,3493,3985,1932,10433,10438,10428],"class_list":["post-15122","post","type-post","status-publish","format-standard","hentry","category-kaspersky","category-security","tag-fraud","tag-kaspersky-lab","tag-scam","tag-social-media","tag-support","tag-threats","tag-tips"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15122"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15122\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15122"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}