Tech support scammer syskey fail

okay I have yet another set of pop-up scammers let's have a look first of all at the pop-up and this case I'm going to ring an OE a duet which is a free phone UK number and cook this error message to them so let's give these guys a shout I will of course do all my usual stuff I have Wireshark running which is already filtered to look for the country of India so it should be quite obvious what the IP address of the scammer is and we will I'm expecting to run through all the usual tricks let's see if they do thank you for calling suppose this is Raven Carter how can I help you today hello yes I've got a problem with my computer and I've got a page by the kind of problem you have any Gambia yeah it's got a page and it says call for support on my computer has been blocked let's get like a blue screen and I keep seeing the page over again can you read it to me what exactly you see on the computer right now sure yeah I got it down the windows key along with the later are all I can romeo I repeated again that is I explore space www support me yeah love it yeah it is seven seven three six four five okay yeah all right now you'll be getting a request from the technician okay you have to click on okay okay so now you can you see the cursor is moving around the computer screen by itself oh yeah right okay yeah all right that is me okay so I have connected a computer might save and secure server now you're connected with me now okay and already have on the computer yeah let's come to the front screen okay so can you tell me sure before you got this problem on it what exactly you are trying to do what were you doing on the come here well mostly compromise just like looking at Facebook or something like on Facebook okay yeah so sir the problem that I have on the computer that is not something good okay this problem is something related to your network the network data using right now that is being infected there are some kind of bad connection which are being connected with your IP address all right you can have a look on the cambio right those information is not safe insecure it's clearly mentioned here your computer has alerted us that it has been infected with the viruses and spyware and the flowing information is being stolen do you see that like a Facebook your credit card your email photos on this one fear so right now whatever the original stuff I'm going to come here that it's not being protected sure because your network is not safe insecure right now might be the reason okay while serving the Internet you have visited any of the web site and you have click on any of the bad links or any of the infected files due to that this kind of virus is installed in your computer and it is allowing some kind of bad connection to get access you come here well Facebook and video banging a debunking yes okay so you can have a look here right including your connection they are for connection which has been found which has been established right now this year oh yeah okay and you can have a look down in the bottom it says the active connection mentioning your the local address and phone address now do you have any ID exactly the foreign address and address that you see on the computer do you know what it is no not okay let me tell you sure the local address that is e right now that is your home network this network is belongs to you right now okay and you can have a look on the right-hand side there are some kind of foreign androids as well do you see that yes you know the foreign address that is he right now sir okay they are the unknown connection they are the unauthorized users who are being connected to you I don't let me go ahead and take all right how far they have damaged your computer as well let me have a look on that okay okay and you can have a look on the computer now right there are numbers of even do you see here yeah I found okay there are lots of errors and warnings which is corrupting your operating system right now do you see that yeah okay all right only then and then when should I call you back okay that's fine ten minutes all right I'll call you after 10 min is that okay thank you so you don't want me to go ahead and help build it the problem yeah if you can yeah do you know what the problem is no but you'd sure either totally bed charge it'll be there so charges and yes or the charge would be the main charge shall from 200 pounds right to fix it that with the two hundred pounds get back to what it was and I won't get this message anymore well if you talk about 200 pounds sure that will only clean up off your computer that means we will just clean up your computer but will not provide any security right if you talk about the security fix up except of your problem that is your 16 digit number go and take your time exploit 8c remember a name on the card I'm filling all the informations just keep watching if I'm wrong somewhere just correct me at the same time hey general there's no need to go on here because it will feel because I've given you fake credit card details because all the stuff that you showed me on my computer you know that's just JavaScript that's just a fake pop-up you know what event we're just choose normal errors and lows you know that the nets that choose your own connection so why are you committing fraud sorry you're committing fraud here this netstat that's your own connection there so all these four connections are HTTP which is just the support dummy client so there's nobody connecting my machine other than you this is a bit of JavaScript so all you're trying to do is get money for absolutely nothing why are you committing fraud if or do you think it is definitely fraud I've just shown you that's fraud that's interesting you get your payments via heck Exxon USA you know something as well so your IP address it's a New Delhi IP address yeah do you think that your have you seen the rest of scammers recently you know tamping down on people like textbook scammers in Mumbai and uncle do you think that you guys might be next export scammers in New Delhi whereabouts as I dream about are you know if you hang a rat arrested for fraud no why not because you're committing fraud mr. JavaScript pop up do you know what the number I'm typing on the screen is I don't know which number is that I'll tell you what that's your IP address okay so I know your own IP address so if it comes to police wanting to track you understand really what is the mean do you understand what is the mean of really IP address let me show you that oh that's your IP address mate because we've got Wireshark running that shows let go click right here ah yeah let's right there's your IP address on Wireshark so yeah and it shows it's a New Delhi so first of all I let clear this tree and let's try it now try the type address what I pair is so plain I've died bearish well why are ready note I'm gonna type that why would why would I want to okay let's go for it then there's your IP address right there that's not going to be much good in a browser unless you've got a you can assume my stop services are you the normal stop services is that what you're going to try and do next that's all part of what you normally do oh well you have to rebut it ok I mean I know a bit safe mood and all the rest but let's just cancel this and why do you use JavaScript pop-ups why are you trying to commit fraud by trying to do JavaScript pop-ups no I did gym language you will never ever able to use this computer anymore trust me that's okay cuz it's a virtual machine but can you just put it in the safe mode why did you did you put it in the safe mode let's do that again shall we okay let's just see load sector services boot or minima you just put it in the safe mode and if you get can't get my my settings back I've this is a virtual machine in it yeah so it's not much good to you I will restore it instantly if you like okay not kiss I will restore this instantly also that oh yeah shine tonight delete all my files oh very good that's original anyway yes the living files won't make any difference either yeah I've Nev even got the permission to delete some of those files and besides that I always just restore the structural machine so you think you've got a victory there you definitely don't okay and it's getting quite boring nice so I will just stop the recording and you can see this in YouTube by MIT I did your own by allowing him to reconnect the machine at this point our phone connection has dropped and as predicted the first thing he did was to try to ciske or lock the machine with password this version of cesky doesn't allow him to do that in fact it shows the password he types into your text Emma tells him he's a scammer if he tries to apply that password to my machine so I Taunton him a little bit more using notepad but really he had he was he had exhausted all of his tricks this point he did attempt as you can see in the second surprise to pornhub but I got a bit bored with him at this point so I decided to drop right his connection so that's the end of his video you will see his details in the captions at the very end I do have a couple of other updates on one of the other videos I produced by the Arriba call center I can't release the video just yet but you will see this shortly these sorts of videos will be producing more of in the future I hope so if you like these sorts of videos please do hit the subscribe button do comment below I will try to answer as many of these as you can on that again thank you for watching

Channel: Jim Browning

Views: 570,877

Rating: 4.9517798 out of 5

Keywords: Scam, tech support, scammer, Microsoft, Phone call, popup, pop-up, syskey, scammer fail, fail

Id: ZI62wEhrzxw

Length: 11min 22sec (682 seconds)

Published: Tue Nov 15 2016