Scammers trying to install remote access software

Software and platform affected

Microsoft Windows

What is the problem?

There has been an increase in reports of scammers ringing potential victims to persuade them to install remote access software on their computers. Using social engineering tricks the scammers try to trick you into believing there is a problem with your computer as a pretext to persuading you to pay for a service you will not actually receive. If fooled, you could also expose your computer to other attacks, and your personal information could be used for identity theft.

The stories the scammers use to persuade potential victims pay for the service and install the remote access software vary but are similar to:

* Claims to be from Techisonline and is aware there is a problem with the person's computer; or

* Claims to be aware there is a virus or similar on the person's computer; or

* Claims to be a Microsoft Certified Engineer and is aware the Microsoft Windows software has expired.

The scammers are using legitimate remote access software including:

* LogMeIn

* TeamView

This is a scam.

Note that Techisonline should not be confused with the Australian business called TechOnline.  It is possible the caller may falsely claim to be from TechOnline, when they are not.

What we recommend you do

Do not install software from people you do not know or trust, especially if the telephone call was not personally requested or expected by you. 

If you have installed the remote access software, uninstall it using the normal methods for uninstalling software on your computer.  Legitimate remote access software may not be detected by some anti-virus programs but may be reported as a security risk by some online scanners such as Secunia's Personal Software Inspector.   If you provided your credit card details to the person you believe was a scammer, then contact your financial institution.

Where you can find more information

Further information about detecting and preventing this type of scam has been reported in previous SSO Newsletters in June 2010 (page 5) and April 2009 (page 2).

Further information about scams in general can be found at the Australian government's Scam Watch web site.

Disclaimer

This Alert has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Alert is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Alert accept no responsibility or liability for information either included or referred to in the Alert. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Alert, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Alert does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Alert, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Alert may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.