Accessing a scammer's PC

wouldn't you just love it if a tech support scammer really slipped up and accidentally give you access to his PC I would read around see what information he has on me the see how he makes is cold and what sort of other files might be lying around I would have a look at his browsing history to see what he gets up to in a spare time well it just so happens that exact people have to meet just a few days hello yeah hi sir this is Ed what Edward once again uh hello there hi yes your ring a minute ago nobody my computer all right so the reason behind the call today sir is to let you know about some air and warning files which are running on your computer without your knowledge sorry in front of the computer at the moment yes let me start up here one second the full flag design windows key with the letter R both the keys together so number of list of number of events almost three hundred and twenty-two just like oh my goodness errors warning now without wasting any more time of yours I would be simply asking you like have you ever seen these problems before you have any basic idea what are they how they got inside your computer no idea all right now I'll tell you sir these are the malicious corrupted error and warning files about which I was trying to explain in the beginning of the call ok these are very very harmful and dangerous the error indicates that more than 60% of the software's are already corrupted and the yellow triangle warning signifies that your computer security is at risk okay now these are the problems about because of which the functionality of your computer is getting hampered day by day now once again give a click on the key option which you see below there and tell me just to let me know when you see the TeamViewer page coming on the screen alright okay now put in there on that partner ID column five eight four zero nine five nine oh one five eight four zero nine five five eight one nine zero one nine zero and give it a click on connect a partner exists now she is asking for password yeah you type in there on the password windows all in the lower case okay now now once it's done then give a click on log on now do you see at the very top the option says communicate yeah okay give a click on communicate yeah now once you give a click on communicate once you give a click on company have given a click on communicate yeah now just beside communicate you see the option which says connect to partner yeah okay sorry hey what are you doing sorry I don't know what Jimmy clicking off the bottom here I can't see community go and drag the kid which wonder had a very car do you see in the very top yeah do I need to what I need to do to I can't find it there why not seems of crashed are you still there hey you mud okay hey you mother well you are you're the one who's coming aren't you my return well it was good to capture everything that I saw on your desktop you're that stupid aren't you so he hung up at this point but I had plenty of information to go on I run my own shark of Cour and I have this IP address and the IP address points location and noida which is a suburb of New Delhi for me the most interesting part of the scam was seeing the software use its open-source code called VI CI web client and they have the bare minimum of information on me they have the phone number a title which is wrong just an initial of the first name surname and a postcode so where my fists have come from well I'm only speculating but that's exactly the same information you would see if you look up a phone book so this is an online search on VT site and as you can see you see an initial a sony 'm a postcode and no title so i would imagine they're using a slightly out of the phone book so what about the spreadsheet that we saw well the first line CD is call back next day to talk to husband the next line is something about calling back a woman mom about an apple the next one i can't really understand because it's both Helle before 9 but that's a call back again the next one's again to a man sir who's either bought or going to buy a new computer because his looks like his son has broken something and he's got a laptop on an iPad the next one is a laptop for a woman man which has got something wrong with it call back a man who was cooking lunch in five minutes number given very scared that is quite a scary one to me they obviously don't care if they scare the people a ring the next one is a man sir computer in repair and call back on Monday the next one sir again call back on the 16th because his computer is in repair again a man to be called back this time at 10 call back a woman who was sick at 11 don't care much for sick people call back a woman I'm not sure what the rest of that is so that was callback list I did call all of the people on this list and the majority didn't realize that it was a scam you can see at least 20 numbers on the spreadsheet and that makes it profitable for a scammer to ring people up around them from the phone book in the hope that they do have some sort of genuine computer problem and the scammer can get a payment I've given the Indian cellphone number of the Haram II number a call but I get no answer however I would like to hear from you if your name's Peter old stock and you think this might be you so what about a friend's browser history well as expected the most visited site is his login for the auto-dial web plant not unexpected but the next was recently used one was it just an mp3 from Pegula world this is probably copyrighted mp3s are linked it then he links to the time in the UK obviously make sure his calls aren't too lit there's just a gifts that he's accidentally clicked on his client and the last one here is an mp3 of a Bollywood movie called zindagi truthfully it was hoping for something a bit more juicy than this but there we go that's all I could get so I think I find a whole lot about our scammer first of all that he was based no idea a common Cole Center location and more in particular I find out what software they use and what their mechanisms are for chasing that up the software is a common open-source dialer client and that integrates with x-lite I see that he holds the bare minimum of information probably from the phone book and he also records each of the calls that he needs to follow up I have no idea how many calls he made but it must have might be quite a few he also takes notes on people that he'd rather not speak to again and we learned a little bit about his browsing history but it's not quite as juicy as I hoped it would be so that's it for this one if you liked it give it a thumbs up and please hit subscribe [Applause] [Music]

Channel: Jim Browning

Views: 5,420,201

Rating: 4.916779 out of 5

Keywords: tech support scam, tech scam, microsoft scam, accessing a scammer's PC, scam, scammer location, scammer IP, remote access, turning the table, scammer PC

Id: 0CBL3rS1ZKs

Length: 8min 52sec (532 seconds)

Published: Sun Jan 15 2017

Reddit Comments

[u/ZombieLannister]

Should've disabled remote input

[u/lews0r]

I was kind of expecting him to do a bit more with the information but it kind of fizzled out. I have his IP address muhahaha i can now do absolutely nothing with this info i have so deviously acquired. Was still nice of him to ring the other victims

[u/b00mtown]

Wasn't there one of these where a 14 year old kid refunded the scammers entire target sheet from like the past quarter? Ended up giving something like 40K back?

[u/penguin5822]

Isn't that just the IP of the teamviewer server he was connecting through? (server21208.teamviewer.com)