Sophiisticated scam or legitimate service?

Page 1 of 5 123 ... LastLast

  1. Posts : 395
    Windows 10
       #1

    Sophiisticated scam or legitimate service?


    A couple of hours ago I was contacted by someone claiming to be from Google Security Services. Texas based, he said. I get several scam calls a week and handled this in my usual fashion with a "Not interested, don't call me again" and ended the call. But unusually this one called straight back and got me listening for a while. At my insistence he gave me a phone number of 18005321200 (which I've not yet tried). Heclaimed that my PC had been hacked and he proceeded to demonstrate evidence that he had access etc. He was using a service called TeamViewer, whose details he popped up on my screen. (I've since called that company and they point out that anyone can use their software.)

    At my further insistence he escalated the call to a manager "Roger Lucas" from the Indian company Ridhima Enterprise. That lasted an hour, during which he took me through views of my Services, Settings, etc. As I expected (although I was surprised how long he was prepared to continue the call) at the end he went for the sale. Specifically he asked me to register a new 'Windows Certificate': 1 Year 289, 3 Yr 399, Life 799, because that would allow them to proceed with fixes, as my existing certificate had expired.

    Naturally I asked for an email setting it all out but - surprise! - he was very anxious to complete the transaction on the phone.

    He'll be calling me back this afternoon and so I'd appreciate any further info or advice. Is it conceivable that the company does have evidence that my PC has been hacked and does offer a service (worthwhile or otherwise) in removing those? What is the consequence of my licence expiring, if indeed it has.

    For months I've had regular scam emails claiming that my PC has been hacked and claiming to know 'my password'. One or two of those do indeed match agains of my score or so of passwords. So I can believe that some hacking has occurred. But needless to say, no bit coins have changed hands!

    Terry, East Grinstead, UK
      My Computer


  2. Posts : 1,048
    Windows 10 Pro (+ Windows 10 Home VMs for testing)
       #2

    Scam, scam, scam...

    Do not let total strangers have remote access to your PC, no matter haow plausible they sound.

    Hope this helps...
      My Computer


  3. Posts : 395
    Windows 10
    Thread Starter
       #3

    RickC said:
    Scam, scam, scam...

    Do not let total strangers have remote access to your PC, no matter haow plausible they sound.

    Hope this helps...
    Well, not really Rick!

    It was presumably hacked before the phone call. How exactly I don't know. What specific steps are you suggesting I should have taken to prevent this, short of pulling the plug on my broadband router?

    For example, would those more technically accomplished than me recommend I permanently disable one or more of the following services?
    Remote Access Auto Connection Manager
    Remote Access Connection Manager
    Remote Desktop Configuration
    Remote Desktop Services
    Remote Desktop Services UserMode Port Redirector
    Remote Procedure Call (RPC)
    Remote Procedure Call (RPC) Locator

    - - - Updated - - -

    I requested an email and have received the following, which I'll include in the thread:

    Subject: Service Center
    From: Service Center <info49servicecenter@gmail.com>
    Date: Wed, 9 Oct 2019 17:56:55 +0530

    Hello Mr. Terry Pinnell,

    We have found your network have been hacked by hackers. Hackers are trying
    to misuse your IP address and your email. So we have to protect your
    identity by blocking those hackers and we have to install network security
    to protect your identity. If we can't block those hackers, those hackers
    will destroy your network. And if the network will be destroyed by those
    hackers then whatever the devices you have, connected with same network,
    every devices could be stop working.

    That is the reason, Our technical supervisor, Mr. Roger Lucas called you to
    show you all the problems and suggest you about the precaution. Security,
    Software and Services, you will be receiving free of cost from our company
    but you have to make a registration in our company to install a new Windows
    certificate for your computer. And for making that registration, there is a
    cost is involved.

    We have three plans:
    2 Year: 259 GBP
    5 Year: 399 GBP
    Life Time: 559 GBP
    Decision is your's, you have to choose any of the plan, which is your
    suitable.

    Thanks,
    Team Ridhima
      My Computer


  4. Posts : 24,547
    10 Home x64 (21H2) (10 Pro on 2nd pc)
       #4

    Terrypin said:
    ....he gave me a phone number of 18005321200 (which I've not yet tried)....

    That number was an old number (no longer in use) for a travel firm in India. A typical scam trick is to 'borrow' a legitimate number.


    Sophiisticated scam or legitimate service?-image.png


    It was presumably hacked before the phone call. How exactly I don't know.
    For months I've had regular scam emails claiming that my PC has been hacked and claiming to know 'my password'. One or two of those do indeed match agains of my score or so of passwords. So I can believe that some hacking has occurred...
    Not proof of hacking, well, not on your PC anyway. More likely one or more of your email addresses have been pwned. Your details have been stolen in a data breach on one of the sites you used it on.

    ';--have i been pwned? | haveibeenpwned.com
      My Computers


  5. Posts : 1,048
    Windows 10 Pro (+ Windows 10 Home VMs for testing)
       #5

    Terrypin said:
    he gave me a phone number of 18005321200
    Do a Google search for that phone number. It appears on several results and appears to be used by a couple of travel companies and a car hire business as well:

    Sophiisticated scam or legitimate service?-scam.png

    It wasn't 'Google Security Services. Texas' that called you, it was an Indian scammer.

    TeamViewer IS a legitimate program... but it can also be misused by scammers. It has nothing to do with the remote desktop services you mentioned... so disabling them would be a really bad idea.

    The text of the email is just the usual nonsense that scammers use to try to worry you into paying for a scam service.

    It's a well-known scam... so don't fall for it.
      My Computer


  6. Posts : 2,487
    Windows 10 Home, 64-bit
       #6

    Terrypin said:

    - - - Updated - - -

    I requested an email and have received the following, which I'll include in the thread:

    Subject: Service Center
    From: Service Center <info49servicecenter@gmail.com>
    Date: Wed, 9 Oct 2019 17:56:55 +0530

    Hello Mr. Terry Pinnell,

    We have found your network have been hacked by hackers. Hackers are trying
    to misuse your IP address and your email. So we have to protect your
    identity by blocking those hackers and we have to install network security
    to protect your identity. If we can't block those hackers, those hackers
    will destroy your network. And if the network will be destroyed by those
    hackers then whatever the devices you have, connected with same network,
    every devices could be stop working.


    That is the reason, Our technical supervisor, Mr. Roger Lucas called you to
    show you all the problems and suggest you about the precaution. Security,
    Software and Services, you will
    be receiving free of cost from our company
    but you have to make a registration in our company to install a new Windows
    certificate for your computer. And for making that registration, there is a
    cost is involved.


    We have three plans:
    2 Year: 259 GBP
    5 Year: 399 GBP
    Life Time: 559 GBP
    Decision is your's, you have to choose any of the plan, which is your
    suitable.


    Thanks,
    Team Ridhima
    I've highlighted the worst of the grammatical errors and tortured syntax.

    That has yet to fail me as a scam indicator.

    Additionally, I've never heard of "Windows certificates", renewable or otherwise.

    I'd guess that among the evidence provided were some number sequences or IDs that are common to all Windows installations, but he'd like you to believe they are unique---and because he knows them, you must have been hacked. In reality, mine are the same as yours or his.

    Obviously, change your passwords if anxious about it.
      My Computer


  7. Posts : 12,417
    Win10 Version 21H2 Pro and Home, Win11 Pro
       #7

    One does have to beware of such calls. One thing mentioned in this thread was Team Viewer, supposed to be a legitimate program but I've not used it.

    My wife just got a call from a 202 area code [Washington, D.C.] on her cellphone and ignored it as she does most out of area calls. Within a minute I got the same call on my cellphone and listened just long enough to hear some type of language that may have been of Asian origin.
      My Computers


  8. Posts : 24,547
    10 Home x64 (21H2) (10 Pro on 2nd pc)
       #8

    Terrypin said:
    ...you have to make a registration in our company to install a new Windows certificate for your computer....

    ....
    We have three plans:
    2 Year: 259 GBP
    5 Year: 399 GBP
    Life Time: 559 GBP
    This is a well know SCAM. See this thread for another example of it....

    Is This MS Operation Normal? Termination of Validity - $200 One Year?
      My Computers


  9. Posts : 24,547
    10 Home x64 (21H2) (10 Pro on 2nd pc)
       #9

    Terrypin said:
    .... he took me through views of my Services, Settings, etc.
    If you have let him have remote access to your PC there is no telling what malware he may have secretly installed. You may have a keylogger sending all your passwords to the scammers.

    The only safe action is to wipe the PC and clean install Windows. You must also change all your site login passwords (banking, email, etc.) immediately!
      My Computers


  10. Posts : 10,523
    Windows 10 Workstation x64
       #10

    As Bree has just said if you gave them access to your PC you need to do a clean install and change all of your passwords for services you have used from that PC.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 05:00.
Find Us




Windows 10 Forums