[AusNOG] Hoax calls ?

[Damien Luke]

They're actually very crafty and will attempt to delete whatever they're
uploading and immediately end the session if they realise that they're
operating in a VM.  They're known to even check device IDs for VMware
disk/nic drivers, etc.  ISC recently had a diary entry about this -
http://isc.sans.org/diary.html?storyid=10912.

Damien

-----Original Message-----
From: ausnog-bounces at lists.ausnog.net
[mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Simon Dixon
Sent: Monday, 18 July 2011 8:09 PM
To: ausnog
Subject: Re: [AusNOG] Hoax calls ?

> On 16 July 2011 14:12, Keith Anderson <KeithA at apcs.com.au> wrote:
>
>
> The web site used was www.support.me / it just redirects.
>

 Looks like they have updated the URL to http://www.logmein123.com,   It
took
 15mins for them to talk me through some Windows Check's to get the URL, she
 then accused me of wasting her time,  after I informed her of what she was
 doing!

 --

 Dicko.
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog