Homepage ESET newsroom

Security expert advice on how to deal with technical support scams

Announcement posted by ESET 15 Apr 2015

ESET discloses tricks and threats used by technical support scammers, and what you can do to avoid becoming a victim
Sydney, Australia, 15th April 2015 – ESET®, a global pioneer in proactive protection, has just published an in-depth report: Tech Support: Scammers with Teeth. This report provides insight on how to deal with technical support scammers who contact you by phone, claiming your computer system has been compromised.
 
The report, researched and written by David Harley, ESET Senior Research Fellow, outlines the pitfalls of scamming the scammer and scammer-baiting.
 
ESET Research Fellow David Harley also delves into what technical support scammers can do if you fail to identify the scam and give them access to your computer system, such as deleting, adding or editing data and programs, and locking the user out of his/her system.
 
“We get many comments from people who actually let the scammer have access to their PCs, wanting to know what to do now,” said David Harley, ESET Senior Research Fellow. “The best way of avoiding problems like these is to avoid giving access to your PC to anyone you can’t – or at least shouldn’t – trust. It’s also worth considering using a third-party registry backup tool to supplement System Restore.”
 
Advice on how to report support scams and tips on how to avoid being the victim of this type of attack are:
 
  1. Don't trust anyone who cold-calls. If you live in a jurisdiction with a "don't call me" opt-out registry of some sort, consider subscribing to it.
  2. Terminating such a phone call rather than trying to find out more about it lessens the risks to you. In fact, any cold call should be regarded as suspicious until proven otherwise, and more so if it offers security advice. At the very least, verify the source and authenticity of any offer of service, and don’t be panicked by warnings of immediate threat into making unwise decisions.
  3. If someone says you have a virus problem – or other system problem – ask them how they know. There are circumstances under which a service provider may have the ability to identify the owner of an infected machine, but most people and companies – won't generally be able to do that.
  4. If you think there really may be some truth to the call, find out exactly who is calling you. Support scammers tend to be evasive about who they really are and who they represent. But if they do give you details, don’t take their word for it. Verify.
  5. Anyone can claim to be anyone on the phone. And if you have caller-ID, don’t take it for granted that the number you can see is genuine, even if it looks ok. Legitimate callers do sometimes withhold their numbers or simply show as international.
  6. Even if they are who they say they are, that doesn’t mean their intentions are legitimate, and it doesn’t mean they have a right to call you.
 
For more information on how to avoid and deal with technical support scams, you can read the full report, Tech Support: Scammers with Teeth.
 
Ends

About ESET
Since 1987, ESET® has been developing award-winning security software that now helps over 100 million users to Enjoy Safer Technology. Its broad security product portfolio covers all popular platforms and provides businesses and consumers around the world with the perfect balance of performance and proactive protection. The company has a global sales network covering 180 countries, and regional offices in Bratislava, San Diego, Singapore and Buenos Aires. For more information visit www.eset.com or follow us on LinkedInFacebook and Twitter.