Wow, who knew that Microsoft has that kind of customer
service? The truth is, they do not, it is a scam designed to separate you from
your money. This is what is referred to as Social Engineering. (One aspect of
Social Engineering is to take advantage of known human nature for the purpose
of manipulating the marks (YOU) behavior. There are several variations of this
scam but they are usually a variation of the following:
First, an email arrives in your inbox saying that there is a
problem with your computer that requires immediate attention. These emails are
ignored by most people and are just deleted. The sender of the email knows that
the email will be deleted so why send it? Well, The second step of this low
tech hack is to actually call the person. “Hello my name is John from
Microsoft. We sent you an email earlier about a security issue with your
computer. I can help you fix the problem. Please go to www.xxxxxxxxxx.com and I will walk you
through the process” The process goes on for a couple of minutes and then they
inform you that your computer is now fixed. Sounds great right?
Now what actually happened, First neither the email or the
caller was from Microsoft nor any issues your computer may or may not have had
is unknown by them. During the phone call with the fake Microsoft tech you
granted him/her access to all of your passwords and financial information. At
some point after the call you will be ripped off and most likely now have a
malicious software infection on your computer that will allow remote access by
the bad guys for future use.
More information and details about this scam can be found on
the actual Microsoft website: http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx
No comments:
Post a Comment
Please feel free to suggest additional Information Security topics you would like to learn about in plain English