Story image

Tech support scams now hide code to mask malicious intent

28 Oct 16

Relentless tech support scams continue to evolve, from the 'your computer is infected' phonecalls to email scams, to what Symantec has now discovered is a different approach.

Symantec has discovered that tech support scams are now using code obfuscators. When users visit malicious websites, a popup window in their browser displays a fake security warning.

It then attempts to get the user to call the provided phone number, with the warning that their system is is infected. As a scare tactic, the popup shows a 'hard drive delete timer' that threatens to delete users' hard drives after five minutes. It also uses sound and warning tones to further the belief there there is a system infection.

Symantec says that end users are often the weakest links in the security chain, and tech support scams tend to capitalise on it without actually infecting users' systems.

However, the company says that users should always network-based protection features, including firewall and IPS built-in. The company recommends that these are never turned off, and users should visit official or legitimate websites for product support.

Symantec has blocked more than 157 million tech support scams this year. The most targeted regions are the US, UK and Canada.

Hillstone CTO's 2019 security predictions
Hillstone Networks CTO Tim Liu shares what key developments could be expected in the areas of security compliance, cloud, security, AI and IoT.
Can it be trusted? Huawei’s founder speaks out
Ren Zhengfei spoke candidly in a recent media roundtable about security, 5G, his daughter’s detainment, the USA, and the West’s perception of Huawei.
Oracle Java Card update boosts security for IoT devices
"Java Card 3.1 is very significant to the Internet of Things, bringing interoperability, security and flexibility to a fast-growing market currently lacking high-security and flexible edge security solutions."
Sophos hires ex-McAfee SVP Gavin Struther
After 16 years as the APAC senior vice president and president for McAfee, Struthers is now heading the APJ arm of Sophos.
Half of companies unable to detect IoT device breaches
A Gemalto study also shows that the of blockchain technology to help secure IoT data, services and devices has doubled in a year.
Huawei founder publically denies spying allegations
“After all the evidence is made public, we will rely on the justice system.”
Malware downloader on the rise in Check Point’s latest Threat Index
Organisations continue to be targeted by cryptominers, despite an overall drop in value across all cryptocurrencies in 2018.
IoT breaches: Nearly half of businesses still can’t detect them
The Internet of Thing’s (IoT’s) rapid rise to prominence may have compromised its security, if a new report from Gemalto is anything to go by.