You are here

How I got tech support scammers infected with Locky

ivan's picture
tech support scam webpage

A few days ago, I received a panicked call from my parents who had somehow managed to land on a (now defunct) web page (snapshot here) claiming they had been infected by Zeus. This horrible HTML aggregate had it all: audio message with autoplay, endless JavaScript alerts, a blue background with cryptic file names throwing us back to Windows' BSoD days, and yet somehow it displayed a random IP address instead of the visitor's one.

First call:

After everyone had a good laugh on Twitter, I decided I would give them a call to know more about what they hoped to accomplish. So I fire up an old Windows XP VM, and get in touch with the "tech support". I am greeted with a pre-recorded message, then Patricia is kind enough to anwser my call. I immediately try to get her hopes up by telling her that I'm a businessman working on an important, high-figure contract, and that time is of the essence. Sadly, it turns out that her French is quite poor so going off-script is a no-no. She guides me through the steps needed to download some kind of remote-assistance client: Windows+R, type in iexplore remote.join360.net, jump through a few more hoops and run whatever executable is offered to you. From what I gather, this is actually a legitimate tech-support program, it being digitally signed and all.

The fun starts now. Patricia fires off cmd.exe after failing to recognize OllyDbg and IDA's icons on the desktop. In what I can only assume is a ploy to establish her technical expertise, she runs dir /s and tells me that the dates match my logins on this system and the files are all the documents I accessed. I feign amazement. Meanwhile, I stealthily send a CTRL+C into the terminal so we can go on with our lives. Patricia then types "1452 virus found", then "ip hacked", and asks me which antivirus software I'm using. None, I reply: they're too expensive and @taviso keeps breaking them anyway. The reference is lost on her but she chastises me nonetheless. Then something weird happens. She tells me that I'm at the end of my 15 minutes of free support and that she's calling me back so I don't have to pay. A few minutes later, I do indeed receive a call from a phone number in Pennsylvania (+1-267-460-7257). She goes back to berating me about my apparent disregard for basic computer hygiene. In the end, she reaches the following conclusion: my computer has been infected, and now it needs to be cleaned up. I'm encouraged to buy either ANTI SPY or ANTI TROJAN, for the measly sum of $189.90. Before I have the opportunity to get my credit card, she goes back to the terminal, runs netstat and tells me that there's someone connected to my machine at this very moment.


"Look! In the terminal! 1452 viruses found! Command not found also indicates that your machine is infected!"
By the way, I believe 115.115.67.53 to be their real IP address.

— Isn't that you? I ask. This says it's someone from Delhi.
An awkward pause follows. She tells me that she's actually the "localhost" line, because localhost means secure connexion. I fight back:
— Are you sure? I thought localhost meant the local machine.
She mumbles a little then proceeds to read me that whole section of her script again, asserting once again that this other IP belongs to a some who lives in Delhi like her but is a totally different person - a malicious hacker. I am not kidding you. We go back to the software she's trying to push.
— All right, I'll buy it, I say. Where can I purchase it in Paris?
Now she sounds quite annoyed.
— I don't know if you can find it in Paris, she replies with her choppy French accent. This is an exclusive software distributed only through Microsoft's premium partners and Microsoft's secure channels.
— Oh, so I just have to get it from microsoft.com then?
— ...Yes.
— Okay then.
— Okay.
— ...
— Did you have any other questions ? No ? Bye then.

Second call:

I assume that this is not how you scam people. She must have been a scammer trainee or something. At this point I realize that some of the screenshots I had taken were no good, so I wait half an hour or so and I call again. I was expecting to talk to the same person and tell her that I couldn't find anything on Microsoft's website, but it's someone new (Dileep) and I have to sit through the whole procedure once more. Dileep seems much more familiar with his script, and he adds some nice details such as showing me that my machine has a lot of stopped services which is "totally not normal". He goes on to tell me that my machine is infected as well, that he just cleaned it for free but he recommends that I purchase a Tech Protection subscription so I don't get viruses ever again. This package costs €299.99 which is way more expensive than Patricia's, but I assume that's because he sounds more experienced. I agree to purchase his package and find test credit card numbers as fast as I can. For obvious reasons, the payment processor rejects the transaction and we try again four or five times. In the end, I suggest using my second credit card and give him another random yet valid (as far as the Luhn algorithm is concerned) number. Dileep makes me repeat both payment details at least ten times and I play dumb. He calls his superior in the hopes of figuring out why the payment isn't going through. In the meantime, I hear other operators in the background repeating credit card numbers and CVVs aloud. I'm assuming they're not PCI-DSS compliant. That's when I'm hit by a stroke of genius. I open my "junk" e-mail folder where I find many samples of the latest Locky campaign - those .zip files containing a JS script which downloads ransomware. I grab one at random, drag it into the VM. The remote-assistance client I installed has a feature allowing me to send files to the operator. I upload him the archive and say:
— I took a photo of my credit card, why don't you input the numbers yourself? Maybe that'll work.
At first, Dileep ignores me. He makes me type in my information a few more times (he's persistent, I'll give him that), until I put my foot down:
— Look, Dileep, I'm old and my sight is not so good. It's starting to hurt, having to squint to read those tiny numbers. Also, we've established I'm no good with computers, how about you give me a hand here?
He says nothing for a short while, and then:
— I tried opening your photo, nothing happens.
I do my best not to burst out laughing.
— Are you sure? Sometimes my pictures have a problem opening on MacOS, are you on Windows?
— Yes, he replies. Your pictures are corrupted because your computer is infected. This is why we need to take care of this.

And while a background process quietly encrypts his files, we try paying a couple more times with those random CC numbers and he finally gives up, suggesting that I contact my bank and promising to call me back next Monday.

In conclusion, whenever one stumbles on an obvious scam, the civic thing to do is to act like you buy it. Rationale: scammers don't have the time to separate legitimate mugus from the ones who just pretend. Their business model relies on the fact that only gullible people will reply. Now were they spammed back, their workload would increase so much that scamming wouldn't be a profitable activity anymore. So if you're a French speaker, you should definitely take 15 minutes of your time, call them at +339 75 18 77 63 and try to social engineer them into doing something funny.

Comments

Interesting that they're using Bomgar - that is NOT a cheap remote support tool. But more importantly - wasting their time aside -

Have you contacted their ISP's abuse address? Their webhost's abuse address?

Have you contacted various authorities regarding the company EasyTechy (Techvedic)?

ivan's picture

I'm in the process of doing all of this.
At the moment, my ADSL connection is suffering from all the traffic coming from Reddit, so I'm having a hard time getting things done!

The Reddit 'Hug of Death'!!

Thanks To Dr. Olu For This Great Help.
i was diagnosed with HIV/AIDS for over 5 years which made me loose my job and my relationship with my fiance after he discovered that i was having HIV, he departed from me i tried all my best to make him stays with me, but neglected me until a friend of mine on Facebook from Singapore told me about a Great healer, who will restore my life back with his powerful healing spell, he sent me the email address to contact (drolusolutiontemple@yahoo.com) and i quickly contacted him, and he said my condition can be solved, that he will treat the disease immediately with his herbal medicine only if i can accept trust him and accept his terms and condition, i Agreed because i was so much in need of help by all means, so i did all he want from me and after 24 hours he told me that he had prepared the cure, which he will send to me and that i will use it for seven (7th) days and after that i should go for a HIV test. I adhere to what he told me and used the herbal cure the way he told me to surprisingly on Sixth (6th) day of He sent me a text, that i should hurry up to the hospital for a checkup, which i truly did, i confirm from my doctor that i am now ( HIV NEGATIVE) my eyes filled with tears and joy, crying heavily because truly the disease deprived me of many things from my life, This is a Miracle, Now my fiance is back to me, everything is now positive in my life, i have regained back everything that i lost. Please do not hesitate to contact DR. OLU if you are passing through any kind of problem, He is God sent. Email: drolusolutiontemple@yahoo.com or call him at +2349036604757 for your healing and solution.

this is real take it serious, who will believe that a herb can cure ten years HIV in my body, i never believe that this will work i have spend a lot when getting drugs from the hospital to keep me healthy, what i was waiting for is death because i was broke, one day i hard about this great man who is well know of HIV and cancer cure, i decided to email him, unknowingly to me that this will be the end of the HIV aids in my body, he prepare the herb for me, and give me instruction on how to take it, at the end of the two week, he told me to go to the hospital for a check up, and i went, surprisingly after the test the doctor confirm me negative, i thought it was a joke, i went to other hospital was also negative, then i took my friend who was also HIV positive to the Dr voodoo after the treatment she was also confirm negative . He also have the herb to cure cancer please i want every one with this virus to be free, that is why am dropping his email address, voodoospelltemple66@gmail.com i want you to email him he is a great man. the government is also interested in this Dr voodoo thank you for saving my life, and I promise I will always testify for your good work you can also add him on whatsApp +2349061243458

Here are their company details including owner and director information https://www.zaubacorp.com/company/TECHVEDIC-TECHNOLOGIES-PRIVATE-LIMITED...

You can file a complaint with the Delhi Cyber Cell - details are at - http://www.secureindia.in/?page_id=942

Hi everyone, this is good news, a perfect and greats one. My daughter of 17years who has suffered of Ovarian Cancer for 2 and half years has been cure by a Herbal doctor called Dr voodoo, who uses herbal and traditional medicine to cure people. I have spent so much on my daughter's health for years but no improvement. A friend told me about this herbal man who cure people with herbal medicine. he cures all sickness, diseases, viruses, and infections with his different herbal curing medicine.The result that declares my daughter janet healed was from a hospital here in USA, And the results of the test says my daughter was okay. Dr voodoo directed that janet would be heal in 7days if she uses the medicine as directed. And 7days later, we went to confirm from the central hospital and several test that was done says my daughter is not sick or anything. So she was cured by this herbal doctor in 7days. This amaze me though. I would advice everyone to meet this Dr voodoo his email is voodoospelltemple66@gmail.com for his herbal medicine to cure your illness because am happy to see my daughter healthy again.Meet Dr voodoo and set yourself and your love ones will free.Dr voodoo email again is voodoospelltemple66@gmail.com visit his website on http://drvodoospelltemple.webs.com you can also add Dr voodoo on whatsApp +2349061243458

It's likely they're on a trial of Bomgar, or they signed up for the service with scammed credit card info.

I previously worked for a different remote access provider, and we'd kick these guys off our service 2 or 3 times a month. It got to the point where we basically had to disallow all web purchases from that region, and set up all accounts through sales directly. Fortunately, they were pretty transparent when they had to actually talk to us.

i would guess they use bomgar because its really easy to get connected and doesnt require a lot of plugins. their users probably would struggle with something like webex. im surprised they can afford it though because youre right, its not cheap

Scamming is more profitable than you can imagine.
The online black market economy is in the range of billions of dollars per year. Even a small piece of the pie is in the millions.

Hello,my name is Rachel Handerson this message is to everyone out there with a health challenge, because i know there are a lot of people looking for solution to their health conditions as i rightly did till i came in contact with Dr. William I bring you Good news. There is this herbal Doctor called Dr.William a herbal practitioner who helped cure me from Herpes 3 months ago, this i contacted from my lover during sexual intercourse and i had suffered from it for the past 3 years. I spent so much money trying to survive from it, to cut my story short, a friend told me different testimonies about a man called William, how he has restored joy back in the lives of people, even when i didn't believe her, she didn't stop the fact that i needed help with my predicament so i contacted him with faith and i got my healing miraculously by taking the herbal products he sent to me to drink for about 15 days . days after completion of the dosage, I went for a medical checkup and i was tested NEGATIVE to the glory of God and with gratitude to Dr. William. I'm sharing this so that other people can know of this great healer called William because i have witness his great works in my live. I want this message to get to every sick person in the world. I was made to understand that he can cure several other deadly diseases and infections like HIV, COLD SORE, WARTS and many more . don't let that illness take your life. you can reach him thru:
TELEPHONE: +2348153089532
WHAT-APP MESSAGING : +2348153089532
EMAIL: drwilliamherbalspel@yahoo.com
please share.

i want to inform the public how i was cured from (HERPES SIMPLEX VIRUS) by Dr Unuareghe,i visited different hospital but they gave me list of drugs like Famvir, Zovirax, and Valtrex which is very expensive to treat the symptoms and never cured me. I was browsing through the Internet searching for remedy on herpes and i saw comment of people talking about how Drunuareghe cured them. when i contacted him he gave me hope and send a Herbal medicine to me that i took and it seriously worked for me, am a free person now without problem, my herpes result came out negative. I pray for you Dr unuareghe, am cured you can also get your self cured my friends if you really need Dr unuareghe help, you can reach him now on dr.unuareghecuringhome@gmail.com or call or watsapp +2349067894643.

Hello all viewer online herpes has cure but doctor said herpes has no cure until i met Dr akube who help me in my life. I was infected with Herpes Genital in 2009, i went to many hospitals for cure but there was no solution, so I was thinking how can I get a solution, so that my body can be okay. until this faithful day as i was browsing the net I saw a testimony on how Dr. akube helped people in curing HERPES disease, quickly I copied his Email which is drakubecuringhome@gmail.com so i contacted him for solution for my Herpes, so Dr akube told me that his going to prepare herbal medicine for my health,then he prepared the medicine and luckily after two week my herpes was be cured. Dr akube is well recognize as one of the best herbalist doctor in Africa, you don't have to be sad anymore or share your tears anymore on this disease when the cure have already be found by Dr. akube herbal medicine, he so cure HIV,CANCER, ALS,HEPATITIS B, DIABETIC ,or his WhatsApp Mobile number:+2348165485326

Am from United State,I have been suffering from (HERPES) disease for the past four years and had constant pain, especially in my mouth During the first year,I had faith in God that i would be healed someday.This disease started circulate all over my body and i have been taking treatment from my doctor, few weeks ago i came on search on the internet if i could get any information concerning the prevention of this disease, on my search i saw a testimony of someone who has been healed from (Hepatitis B and GUM disease) by this Man Dr astogo and she also gave the email address of this man and advice me to contact him for any sickness that he would be of help, so i wrote to Dr astogo telling him about my (HERPES Virus) he told me not to worry that i we be cured!! hmm i never believed it,, well after all the procedures and remedy given to me by this man, few weeks later i started experiencing changes all over me as Dr astogo assured me that i have cured,after some time i went to my doctor to confirmed if i have be finally healed, behold it was TRUE, So friends my advice is if you have such sickness or any other at all you can email Dr astogo on : (drastogospellhome@gmail.com) or call him with +393510025283. he live in europe and he is ready to help you no matter the country you are. sir i am indeed grateful for the help i will forever recommend you to my friends!!!

MY HIV HEALING TESTIMONY

My mouth is short of words, i am so so happy because Dr. UGO Wonders has healed me and my husband from HIV disease which we have been suffering for over 3 years. we have spend alot when getting drugs from the hospital to keep us healthy, we have tried all means in life to ensure we become Hiv negative one day, but there was no answer until we found Dr UGO Wonders the chief priest of GENERAL SPELL TEMPLE on facebook who provided us some healing spell. now i am glad telling everyone that i am now HIV Negative, i am very very happy, thank you Dr. UGO Wonders for helping my family comes back newly without any form of crisis. i am so amazed because its over a year now since i receiver my everlasting healing and cure from HIV. therefor i will announce to the whole world and anyone out there who is HIV positive to please follow my advice and get healed on time, because we all knows that HIV disease is a deadly type,contact Dr. UGO for your HIV healing spell today at: generalspelltemple@gmail.com. He will be always happy to assist you and ensure you get healed on time or you can Whatsapp him on +1 (518)855-8371

He can also launch other similar spells ,
Love Spells
Lottery Spells
winning court case
Divorce spells
Success
Money rituals
Low sperm count
Infertility in women
Breast enlargement/reduction
Penis enlargement/reduction
Health, Well Being
Protection, Healing
Curses, Hex, Breakups
NEW! Combo Spells
High Priestess Spells
Vampire Spells
Authentic Voodoo Spells
Custom, Other Spells
Business spells
Health/Healing spells
Curse removal
Job spells

WhatsApp Number: +1 (518)855-8371
Contact:> Dr. Ugo Andrew Wonders
Contact Email: generalspelltemple@gmail.com

Am from USA, am here to give my testimony about how i got my HIV disease and how I was flew from it quickly after having on trust on my spell doctor who cured me immediately. Since the year I married to the man I did love because my parents false me to marry him, I have not been enjoying my relationship and sex life with him, he do spend time on his work and don’t have time for me sometimes, he do sleep at his work and also do carry women’s because he has the money to spent but does’t spend it on me. So I was so jealous to the extent that I can’t even control my anger and I decided to start cheating on him with my ex-boyfriend, because my husband do not always be at home expect on weekends, I have sex with him without protection, after some months been in love with my ex-boyfriend I was so sick and I decided to go to test and I found that I was HIV positive I feel so sad and was ashamed because I did know how to open up to my husband I hate before, my ex-boyfriend denied me and when my husband found about what was going on he divorced me and i was ill for good 3 years i went to many places for solution but there was no solution. so one day I was asking GOOGLE some question,s how I can get a cure and how i can get some medications which I will be taking to my own surprise they brought one email out named dr.alabihivcure@gmail.com that this powerful man can cured HIV AIDS positive,I did not believe about the cure before but i took the email and searched it on GOOGLE and i found many good testimonies about him, people have been giving more testimonies about him so i contacted him about my situation, he told me all the procedures which I will take, And I did before I knew what was happening he called me and told me to go for an HIV test which i did and when the result was out I was HIV negative. Thanks to Dr Alabi, now as I am giving this testimony I am now fully settle down with my husband now and we both loved ourselves, I give this testimony for people around that was in my shoes so that they can also be cured like me, so if you also need a solution also you can email him at dr.alabihivcure@gmail.com,

I was cured of HIV with the used of natural herbs. My name is celina jolly and am from US. I love herbs so much. Most times, injection and drugs are just a waste of time. I was cured 8months ago, i suffered from HIV for 13yrs but with the help of Dr.voodoo herbal medicine, i was cured within few weeks of drinking the herbs he sent to me through courier delivery service. This same doctor also cured my Aunty from herpes, as soon as i heard she had herpes, i quickly refer her to Dr.voodoo and she was cured too after drinking his herbs.I have referred more than 15 persons to Dr.voodoo and they were all cured from their various illness. Have you taken herbs before?. You have spent so much money on drugs,injections,surgeries etc and yet you have no good result to show for it. Contact Dr.voodoo now, he is a herbalist doctor, i assured you of a cure if you drink his natural herbs. Dr.voodoo have herbs that cures HIV, Herpes, diabetics, asthma, hepatitis, HBP, STD, cancer, chronic, etc. Contact Dr voodoo through his Email address on: voodoospelltemple66@gmail.com or WHATSAP/CALL him on +2349061243458 Please share the good news to other people once you are cured

I has suffered for Human papillomavirus HPV) for 2years, I was given some tablets at the hospital but I refused to take it, They said I have to be on it for life so I don't want take a drugs everyday for life. No point in taking medicine everyday when u won't get cure from it and I was advice to seek for natural herbal cure, after some time I found dr Akube is the most trustful herbalist that have herbs to cure wicked symptom's,I emailed dr Akube, for 2weeks been his patient he cured my (HPV) with his herbal. I only used his natural herbs for two weeks it was 100% cure. I'm not (HPV) patient anymore. I'm happy about it i finally got cured out of this mess been in my body for 2years. I also recommend you if you're living with (HPV) or herpes symptoms i also want you to be free contact dr akube with the email attach to my post dr.akubecuringhome@gmail.com

Am from USA, am here to give my testimony about how i got my HIV disease and how I was flew from it quickly after having on trust on my spell doctor who cured me immediately. Since the year I married to the man I did love because my parents false me to marry him, I have not been enjoying my relationship and sex life with him, he do spend time on his work and don’t have time for me sometimes, he do sleep at his work and also do carry women’s because he has the money to spent but does’t spend it on me. So I was so jealous to the extent that I can’t even control my anger and I decided to start cheating on him with my ex-boyfriend, because my husband do not always be at home expect on weekends, I have sex with him without protection, after some months been in love with my ex-boyfriend I was so sick and I decided to go to test and I found that I was HIV positive I feel so sad and was ashamed because I did know how to open up to my husband I hate before, my ex-boyfriend denied me and when my husband found about what was going on he divorced me and i was ill for good 3 years i went to many places for solution but there was no solution. so one day I was asking GOOGLE some question,s how I can get a cure and how i can get some medications which I will be taking to my own surprise they brought one email out named dr.alabihivcure@gmail.com that this powerful man can cured HIV AIDS positive,I did not believe about the cure before but i took the email and searched it on GOOGLE and i found many good testimonies about him, people have been giving more testimonies about him so i contacted him about my situation, he told me all the procedures which I will take, And I did before I knew what was happening he called me and told me to go for an HIV test which i did and when the result was out I was HIV negative. Thanks to Dr Alabi, now as I am giving this testimony I am now fully settle down with my husband now and we both loved ourselves, I give this testimony for people around that was in my shoes so that they can also be cured like me, so if you also need a solution also you can email him at dr.alabihivcure@gmail.com,or whats-app number.. +2349061385058

All thanks to DOCTOR NGOZI WILLIAM for his wonderful help in my life i am CASEY LEONARD i was diagnosed of HERPES VIRUS[hsv] early last year, it was not easy trying to cope with the virus i have gone to different hospital for solution but all i get is loads of drugs that only subside the pains for a while i really saw hell this past year but am happy that is all in the past now, i got my healing from Doctor William through a friend that once had HERPES before she gave the doctors email which is drwilliamherbalspel@yahoo.com i emailed Dr William as quick as possible and told him my problem which he told me that he have cure for the virus he ask me for my information were the medicine will be delivered to me and i should make preparation for it, i got the medicine delivered to me in no distant time just according to Dr William so i started applying the medicine as directed by the Doctor the medicine lasted for some days after which i went to the hospital for checkup to know my status i was scared when the doctor was coming towards me to break the news, am so happy my status is now pure negative am free from herpes virus once again just as DOCTOR WILLIAM promised, Hello Friends i recommend DOCTOR NGOZI WILLIAM to you all that is still in pursue for HERPES CURE you can try his herbal product and give your testimony of joy like me, you can try doctor william with his Email:drwilliamherbalspel@yahoo.com

Hello friends,
I was suffering from ( HERPES DISEASE ) for over 3 years,i was hopeless until one of my friend directed me to a man called Dr Ighodalo, she said he cure Herpes disease and also said he has helped her friend to cure Herpes Virus, and cure other people with different diseases, i never believed her but after a lot of talk, i decided to give the DOCTOR a try, just few days later i contacted him and he told me what to do which i did and he prepared a herbal medicine and sent to me with prescriptions on how i will take it for a period of days. After i finished taking the medicine he told me to go for a test which i also did and when the result came out i was surprised to see that i'm Negative. Big thanks to him. You can also contact him via dr.ighodalocuringhome@gmail.com if you need his help for HERPES cure.

Hello Friends,
I have been suffering from Herpes Disease for the past 3years and i was really hopeless not until i shared my situation to a friend of mine who finally introduced me to a man called Dr Ighodalo. She told me that he cures herpes disease and that he even cured her nephew who was still suffering from herpes too and some different people with different diseases, i never believed her because every moment of my life is to stay online searching for Remedies to apply and never got any but after a whole lot of talks , i decided to give the doctor a try. Just some few days later i contacted him and he told me what to do and which i did and he prepared a herbal medicine and send to me with prescriptions on how i will apply it for some period of days. After i finished taking the medince as instructed by him, he asked me to go for a test and which i really did also and when the result came out, i was so surprised to see that i'm now NEGATIVE. Please who so ever that is reading this i'm not joking here i am fully cured and i'm happy right now with my new life. If anyone needs to contact this same doctor that cures me from this deadly virus, i will be greatful to share his mail that i contacted too via dr.ighodalocuringhome@gmail.com I'm not doing this because i don't have important things to do but i just have to take some of my time to share this good news to the public because i know there are so lots of people out there who really need helps and trust me i have gone through the stress and pains they're going through right now. All the same i will still be Praising God for restoring a normal life back to me by sending someone to cure me from the deadly virus i got my self involved with before now.

Thank you.

thanks to dr.abaka for his good work I never believe that HIV has cure, I was HIV positive over 2 year now before I came across a comment about how dr.abaka cure HIV and herpes disease but when I saw it i have it in mind that he can’t cure HIV I just decided to give it a try I contact him that night luckily to me he replied me, but I don’t believe him I thought it was a scam but I still hold on to see the work of Dr abaka if he is saying the truth he ask for some details about me i gave him all he needed and I waited to see his reply to my problem after all, he told me to go for check up and I went for HIV test I cant believe I was negative,am so happy and grateful to God for using Dr abaka to cure me, that is the reason why i decided to write this wonderful testimony of how i was cured, i recommend Dr abaka to you all around the world,contact him on his Email drabakaspelltemple@gmail.com or you can also reach him through +2349063230051 thanks dr.abaka for helping me at this young age if you need help contact, He can also cure so many sickness

THAT IS AWESOME - HELL YA!

I urge you to check out 419eater.com this is an excellent strategy to shut down the scammers. You are doing the world a great service!

All i have to say is that... this is amazing genius! i hope that there machine have been affected by the ransomware! if i get any similar calls i shall do the same.

Hats off to you, Sir!
Well done!

*ROTFL*

That website is operated by South African scammers and has been for years.

What? Can you elaborate?

Nice try, nigerian prince.

One of my wife's dearest friends fell victim to this scam. She is not computer savvy. She is really good and trusting person. I've been rather angry about it ever since. Afterwards, she got concerned and called me. I explained how the support scam worked to her in layman's terms. I've been hoping for a call myself. I have a nice BeEF-ed up website I could use their assistance with.

I sent one of the scammers fake wire transfer documents. When I got tired of stringing him along I ask him to go take a hike. The poor fool kept checking his bank.

I wonder if that really worked. A ransomware my neighbor encoutered was intercepted by Windows 10 within days of the email receive date.

I did something similar. Wrote a batch script that launched 5 instances of IE that went to the top 5 known sites with the drive-by variant. Compiled it into a .exe, changed icon to the Wells Fargo emblem and renamed My Digital Locker. Now we wait...

Bravo, excellente et instructive manoeuvre!

lol, did you call back ?

Well done ! As a techie yours is my favourite scam revenge story .

As the owner of a call center business in India in my past life , I feel sorry for the call center agentthat you called as well.
The agents actually talking would just be reading from a script without ever questioning the legality of the whole process.

When I used to search for call center work for my company back in the day , there were many clients like these which used to want to give us work. Offcourse if we agreed to do a 30 day free trial for them before they start paying us.

Being a techie , I knew not to trust them ever and would ignore them . However a new eager business whose owner might not be tech savvy , you could easily get duped. Worst possibly commit a crime.

That being said a business owner who falls for such clients probably deserves every bit of what you did , probably more.

This is brilliant. And thanks for the link to the card number generating site. I can't wait for them to call. Now, if I just had one of those Locky scripts...

I salute the OP, very well done!

Agree, waste as much of these scumbags time so in essence, the more time they are dealing with you the less time they are taking advantage of someone who would fall for these scams.

Scambaiting is a fun game to play for those who are tech savvy.

'Its Lenny' is another great tool to waste these scammers time if you don't have the time, patience or tech to screw around with them.

I am a 67-year-old. My Hepatitis B (HBV) disease appeared at the age of 61, with no hope of a cure from the hospital i looked further for an alternative treatments, a friend of mine told me about Health Herbal Clinic in Nigeria who sell herbal treatments for diseases including Hepatitis B disease, I contacted the herbal clinic via their website and purchased the HBV herbal remedy. I received the herbal remedy through DHL couriers within 7 days and i immediately commenced usage as prescribed, i used the herbal remedy for about a month and 1 week, my condition has greatly improved, all my symptoms including Abdominal pain, Nausea and vomiting, Loss of appetite, I am HBV free! contact Health Herbal Clinic via their email drabakaspelltemple@gmail.com or visit https://drabakaspelltemple.blogspot.com.. PLEASE HBV OR ANY DEADLY DISEASES is not a death sentence, there is a cure..

Hi Ivan, i read from your OP around the parent-story in a austrian newspaper - Congratulations, i`m 57 years old and working longer time in IT. Happy, that this ass-holes can`t rubbery your parents.
Many regards from Vienna - Austria

Yes Your Story in News Portals Bro Good Work

ivan's picture

I knew of their project as well. I think it's awesome!

This is gold. "I'm old and my sight is not so good" - too funny.

The trouble is if they now connect to remote computers ogfgenuinely gullible people, those other people may get the locky infection.

I was expecting something like reverse shell to those bastards. anywayz, nice tips.

ivan's picture

It was quite difficult to set up a C&C during the phone call!

Hello:
If only everyone could do this!
Could you provide details so that the average person could revenge these scammers?
Your methods of dealing with these scammers are great, but somewhat hard to follow.
I'm not an IT person, but am adept at 'fixing' most all of my PC issues (I've never had to take a PC to a shop),
but your methods are still beyond me.
Could you provide a script or other instructions so that I could follow your method of scamming the scammers,
without infecting my computer?
Thank You!

Pages

Add new comment

(If you're a human, don't change the following field)
Your first name.
(If you're a human, don't change the following field)
Your first name.
(If you're a human, don't change the following field)
Your first name.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
To prevent automated spam submissions leave this field empty.
CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.