[AusNOG] Windows Virus people [slightly OT]

[Adrian Daluz]

It's always highly interesting when they call pretending to be from windows and you explain that you do not have an external internet connection nor any windows machines in your house. It's funny how quickly they go from windows to apple.

It seems to have slowly died in the past few weeks, but I have to agree that the emergence of SIP and the growth in that sector is going to cause further issues with companies such as these. 

-----Original Message-----
From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Don Gould
Sent: Thursday, 22 September 2011 1:02 PM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Windows Virus people [slightly OT]

I note with interest that these guys are no longer claiming to be from 
Microsoft, however my caller last night assured me that if I didn't let 
him help me then 95% of computer would be whipped and would be no use 
for anything other than putting in the rubbish bin.

Strangely they do seem to have good enough English language skills to 
understand most of what I was saying, but was insistent that my start 
button was on the bottom left corner and 'even a child knows this'.

But he could not grasp that I wanted to know which of my 10 computers he 
wanted me to turn on.  What's more, he also could not grasp that I 
clearly new a little bit about computers and his scam just by comments I 
was making.  He just ignored comments.

It's almost like their calls are recorded and they're just engaged to do 
this stuff.  Very strange.

18 minutes later he hung up.

In the mean time, we've had a bit of debate here in .nz on some lists 
about how these calls are getting into the system and a common cause 
seems to be issues with SIP appliance security and some providers not 
putting enough focus on this.

In the new NBN world, where everything is going to be SIP, it seems that 
we're going to have to start to pay more attention to this stuff?

D




On 22/09/2011 2:05 p.m., Stephen Rowney wrote:
> A bit of a late update on this scam...
>
> http://www.pcpro.co.uk/news/370054/microsoft-dumps-partner-over-support-
> call-scam
>
>
>
>
> Regards
> Stephen
>
>
> ************************************************************************
> ******
>
> -NOTICE-
>
> This message is confidential, and may contain proprietary or legally
> privileged information. If you have received this email in error, please
> notify the sender and delete it immediately.
>
> Internet communications are not secure. You should scan this message and
> any attachments for viruses. Under no circumstances do we accept
> liability for any loss or damage which may result from your receipt of
> this message or any attachments.
>
> ************************************************************************
> ******
>
> -----Original Message-----
> From: ausnog-bounces at lists.ausnog.net
> [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Rod
> Sent: Friday, 12 August 2011 4:25 PM
> To: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] Windows Virus people [slightly OT]
>
> I just refuse to give my details when cold called by anyone.
>
> I tell them (generally Telstra)  they called me and if they want to
> continue talking they can talk without me giving my details or they can
> hang up.
> They've said I can call them back and I again refuse unless they tell me
> the nature of the call. I'm tired of companies treating us like sheep
> and no longer tolerate it.
>
> Maybe I'm also getting old and cantankerous but I figure that's their
> problem, not mine!
>
> Rod
>
>
> -----Original Message-----
> From: ausnog-bounces at lists.ausnog.net
> [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of David Walker
> Sent: Friday, 12 August 2011 4:03 PM
> To: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] Windows Virus people [slightly OT]
>
> On 12/08/2011, James Williamson<lists at jimiw.net>  wrote:
>> You might want to try ACMA's list of allocated numbers -
>> http://web.acma.gov.au/numb/openAccess/inquiry/viewAllocationSearch.do
>
> The full database looks to be Australian only.
> I don't know much about VOIP but if it's an overseas call that's the end
> of that right?
>
> On 12/08/2011, Andrew Yager<andrew at rwts.com.au>  wrote:
>> Just had an interesting call from Microsoft Windows Support telling me
>
>> my computer had a virus.
>>
>> I told them that the Kernel was missing and it kept restarting.
>>
>> They have given me a phone number to call them back on - does anyone
>> have a good way to find the carrier who holds that number to alert
>> them to their customers "dubious" activity? It's quite obviously a
>> VoIP service - sounds like an ILBC codec at one point (at least).
>
> 99% probability it's from India. 1% margin of error ...
> Probability of getting the service yanked 0% right?
>
> Unless it's an "obvious" scam nothing will happen ... if it's anything
> like the web ...
> Do it anyway ...
>
> Looking forward to the day that Microsoft start being pro-active about
> doing that for you on your behalf ...
>
> You could report here:
> https://www.scamwatch.gov.au/content/index.phtml/tag/reportascam
> At some point this might reach critical mass and there's some diplomatic
> communication (Julia drops in for a chat and "oh, by the
> way") ...
> ... from here it certainly looks like the Indian government doesn't have
> the same regulatory framework/interest as the Australian.
>
> Not unexpected minor twist ...
> http://www.scamwatch.gov.au/content/index.phtml/itemId/862103
>
> They're (Telstra et al.) doing a dis-service to Australians by cold
> calling us and asking us to verify ourselves by divulging personal
> information - and further prompting us with our year of birth ...
> When we ring them they get that stuff right ... apparently they can't
> swap the ends around and see the incongruities. I know why they do it
> but it doesn't make it sensible. It's easy for them.
> Australians are being conditioned by Australian corporations to expect
> to be cold-called and asked private details on the phone ... in my
> experience we're also being Pavlovianized by the obvious disgust of the
> corporations when we don't want to play ball.
>
>
>
> Every time Telstra have one of their machines phone me asking for me to
> key in my birthdate and whatnot I hang up and phone them back ...
> ... so I condition myself to have my bullshit meter on eleven ...
> ... and their CSRs laugh at me when I explain why ...
> ... well they actually get quite dismissive ...
>
> If only we had some prior art from say the internet or something they
> could study and think about.
> Like moms and dads getting stung and the last ten years of corporations
> saying they will never email us and do such and such ...
> effectively nullifying any trust relationships in that sphere and
> getting the susceptible to turn their bullshit meter on and to leave it
> on ...
>
> Perhaps they need to employ someone who's studied computer science or
> military history or something ... or been on the internet at least once
> ...
>
> Further reading:
> http://lists.ausnog.net/pipermail/ausnog/2011-July/010872.html
>
> Best wishes.
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Don Gould
31 Acheson Ave
Mairehau
Christchurch, New Zealand
Ph: + 64 3 348 7235
Mobile: + 64 21 114 0699

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog