I just got a call from "Microsoft technical department global services"

  • Thread starter Thread starter Virus Guy
  • Start date Start date
V

Virus Guy

Well actually it was my SO that answered the phone, and as I heard the
conversation from my side it sounded way more than just the average
telemarketer phone call.

Who-ever this person was, they seemed to want to impress on recipient
that their computer was infected with something.

I told my SO to tell them that we have a MAC computer - an Apple (not
Microsoft / Windows). This seemed to throw the caller a little bit, but
they pressed on with their script.

The caller, with a very noticable east Indian accent, identified
themselves as calling from "Microsoft technical department global
services" and repeated several times that we "have a virus / severe
dammage to your computer / in two days".

My SO remembers getting a similar call like this a couple months ago.

Call display says the call originated from (202) 239-6000 (which I know
is rarely accurate and can be easily forged).

A little bit of googling came up with this:

http://answers.microsoft.com/en-us/...one-call-from-someone-claiming-i-have-a-virus
/4489f388-d6de-416d-9158-0079764bb001

(it's a long URL - reassemble if necessary)

It looks like this is some sort of scam to enable remote assistance or
desktop sharing or something like that (as a windows 98 user, you'll
have to excuse the fact that I'm not up-to-date as to all the ways that
a win-2k/XP/vista/7 computer can be taken over by in-built tools,
services, mechanisms and programs).

This is pretty brutal that hackers are resorting to picking random phone
numbers and using telephone contact to gain access to their computer.
It must mean that electronic methods (malicious e-mail, web-hijacking,
etc) are failing more and more often these days.

If they call again, I'll be sure to take the call and see exactly where
this goes / how it's done.
 
~BD~ said:
SO = Significant Other?
Yes.


*Do* you have an Apple Mac?

No. I was curious as to how the caller would respond or change their
strategy if their basic premis (that the target is running Windows) is
false.
If so, do you use any anti-virus or anti-spyware programmes?

I do have NAV 2002 installed on this machine, but that's only because
I'm not motivated enough to uninstall it. It's the only AV program that
I've ever installed on my win-98 machines, and they've never detected
any mal-files that I didn't already know were on my system(s).

PDF files can't auto-execute or auto-render themselves on my systems,
and my hosts files have entries that block many / most / all major
ad-servers and click-trackers. My web-browsers give out fake user-agent
information so that if any webserver wants to send me malware designed
for my browser and OS, it will send me patently wrong infectors or
exploits.

AV / AM threats against me and my win-98 systems are simply a non-issue,
and have been for at least the past 5 years, and I don't see that
changing going into the future.
There are some!

There really are no exploits (like network worms) that work against
win-98. If win-98 was ever exploitable (and I believe secunia.org has
the answer to that) I think it was because of IE. None of the PDF
exploits that surfaced starting 3 or 4 years ago were functional on
Acrobat reader 6.x running on win-98.

There maybe some unpatched IE6 exploits (although I believe the majority
of those are documented to work against win-2k/XP moreso than win-98).
Many or most of the IE6 patches released for win-2k since the end of
support for win-98 (July 2006) and the end of support for win-2k (last
year?) are fully transplantable / usable on win-98 (not that I think
that they are useful on a win-98 system from an exploitability pov).
I'll look forward to your report!

It might be quite a while. We'll see...
 
Virus Guy said:
Well actually it was my SO that answered the phone, and as I heard
the conversation from my side it sounded way more than just the
average telemarketer phone call.

What is an SO?
 
Back
Top