How Apple and Microsoft’s trusted brands are being used to scam you

0
8
How Apple and Microsoft’s trusted brands are being used to scam you

No, the message that pops up on the screen is not Apple or Microsoft actually telling you that your computer is infected.

Scammers try to convince you to call them and reveal sensitive information, which may include passwords, bank or credit account information, or Social Security numbers.

“They use their brand reputation (for legality purposes) to make it look more authentic,” said Cliff Steinhauer, director of information security and engagement at the National Cyber ​​Security Alliance. “Because, who doesn't Do you know the brand Microsoft or Apple?”

With Apple's recent release of new iPhones, consumers may now see more of these scams. Nati Tal, director of Guardio Labs, said fraud activity tends to increase when new products or versions are released because it is easier for scammers to take advantage of the headlines and launch cyberattacks. “In a very short period of time, they will have access to a large number of potential victims.”

These scams can affect anyone, but as with other recent waves of tech-related consumer crime (such as Bitcoin ATM scams), seniors are especially vulnerable. Last year, nearly 18,000 victims aged 60 and older report Technical support scams filed with the FBI's Internet Crime Complaint Center made it the most widely reported type of elder fraud in 2023.

Thanks to artificial intelligence, these types of scams are harder to spot, especially when the scheme uses a known company logo to make it look legitimate. People should know the following to protect themselves from scams targeting popular, trusted tech brands:

Never assume any online advertisement is true

People can be deceived in many ways. One way is through malvertising, where bad actors pay for ads on search engines like Google or Microsoft's Bing. These rogue ads may appear as sponsored content or as ads in fine print during search engine queries.

So, for example, a consumer searching for “Microsoft support” might be shown Fake Microsoft Ads and provide the number to call. By calling this number, people are falling into the hands of scammers, according to Malwarebytes, which has identified many of these scams. Malwarebytes also discovered a malvertising campaign targeting Mac users Apple support or extended warranty.

Jérôme Segura, senior director of research at Malwarebytes, said: “People have all kinds of problems with their computers and they ask for help, but many times the numbers they find are scammers' numbers rather than real numbers.

Pop-ups, emails from brands you know are often viewed with suspicion

Technical scams also use phishing emails to lure unsuspecting consumers into renewal offers that appear to come from legitimate sources, including Microsoft, McAfee, PayPal and Norton. These emails may contain malware if the user clicks on the link, or they may be a phishing attempt to obtain more information from the individual. Sometimes, simply opening an attachment can infect a consumer's computer with malware.

Another type of tech support scam occurs when a pop-up window appears on a user's computer warning of an “infection.”

There is often audio associated with this type of scam, giving consumers a sense of urgency to call the number listed in the pop-up. There may also be a button that says “Return to Security,” but when clicked, the regular browser window (with the address bar and window title visible) becomes a full-screen page with a message about not restarting the computer because “it Infected,” Segura said.

“Imagine, as a user, hearing constant audio playing in the background saying that your computer has been compromised. This can cause a lot of stress and can lead people to make poor decisions and call fake phone numbers,” he said explain.

Once people call, they are often manipulated into sharing personal information such as credit card numbers or giving scammers access to their computers.

How to click without getting into trouble online

First, consumers should avoid clicking on sponsored ads obtained during Google or Bing queries. (Tip: These usually appear at the top of the search results page, but may appear further down, so look for the word “sponsored” or “advertising” depending on the search engine.) Consumers should also avoid randomly clicking on ads sent in emails. link, even if they think they know the sender. Do not open attachments unless you are sure you know what is being sent.

Segura said the general rule if a computer virus pop-up warning appears is to just click on the browser's own icon, which is usually located in the upper right corner. “Never click on any other 'X' within the web page itself because it's fake,” he said.

If people do click the X or click Return to Security, the web page may go into full screen mode. “If this happens, you will have to press and hold the keyboard's escape button (Esc) to exit full screen before you can finally exit,” Segura said.

Internet browsers have basic protection features, so it's important to keep your browser updated. You may also want to install free or paid protection services that cover many types of threats.

What to do if you fall for a tech scam

Next steps depend on the type of information you share with the scammer. For example, if you called a “Microsoft” or “Apple” number and provided your username and password, change these. Jim Routh, chief trust officer at identity security company Saviynt, explained in an email that if you've only shared your name, address and phone number, you don't need to do anything because scammers can Data brokers easily obtain this information.

Consumers who share their credit card number, expiration date and CVV should call their credit card company's fraud hotline to report the incident and request a new credit card overnight.

If you share credentials for other online accounts with fraudsters, you should change the password for each account immediately. It is also recommended that consumers Freeze their credit Works with each of the three major credit bureaus: Equifax, Experian and TransUnion. Even if there is no specific threat, this is a good practice for your entire family, especially children under the age of 18. It is also recommended to send a fraud alert to one of the credit bureaus, which will forward the information to all three credit bureaus.

Rouse said those concerned about installing malware without antivirus protection should choose a reputable brand and install it. If they lack the technical sophistication, they can call Geek Squad or a similar service to scan the workstation and find malware to remove. He added that consumers who provide remote computer access to scammers should take their devices to a service professional for assistance.

LEAVE A REPLY

Please enter your comment!
Please enter your name here