Remote access scam call

Wig

I just had one !

I played him for a while, eventually he told me to go to this website
http://www.ammyy.com/en/

What I wonder is that their own scam website or is the website legit just being used by scammers for nefarious purposes?

loracan1

I let them get into their spiel, then just casually drop in somewhere along the line that I'm on linux/apple/don't have a computer. They hang up.

fiddiwebb

An variation on a theme..........

http://www.google.co.uk/#q=ammyy.com+scam&hl=en&prmd=imvnsfd&tbas=0&source=lnt&sa=X&ei=tZ0aT6KaBoje8QO8y-GTCw&ved=0CBIQpwUoAA&bav=on.2,or.r_gc.r_pw.,cf.osb&fp=9d2206684cf9bc41&biw=1024&bih=453

esuhl

Wig wrote: »

What I wonder is that their own scam website or is the website legit just being used by scammers for nefarious purposes?

I imagine it would be their own website so that they have control over the information they obtain.

The only other possibility is that the scammers are a subcontracted organisation that are paid by an employing organisation to acquire information for them. I would have thought the added complexity of multiple malicious organisations doing business together would be impossible as any legal contract detailing such arrangements would be unenforceable as it would expose illegal activity.

So, as a complete guess, I suspect they operate independently and trade their information through illicit trade websites (like a version of eBay for stolen credit card numbers!)

Wig

loracan1 wrote: »

I let them get into their spiel, then just casually drop in somewhere along the line that I'm on linux/apple/don't have a computer. They hang up.

I didn't want him to be able to give up so easily, I knew he would have very little luck with me. So I just said 'yes' when he said "Your Windows Operating system"

He said first step was to go to desktop
-His name was Arthur Jones by the way, and he was from India but he was calling from London, where had moved to from India to get a good job and support his family .....

Opening Spiel
How long will this take?
Only 2 mins Sir.
Ok
Desktop>Start> and "do you see "Documents""?
Yes
Underneath documents do you see 'computer'
No, I see 'Settings'
Do you see computer anywhere?
No
Do you see computer anywhere?
On my desktop I see my computer icon
Oh ok good, right click on my computer icon and select xxxxxx (can't remeber what he said manager or something)
I don't have manager
Oh what do you have?
I have, open, explore, find...
Oh dear, ok, Look on your keyboard
yes
Do see bottom left a windows flag key?
No, bottom left is a 'ctrl' key
No flag key next to it?
No, ctrl key then Alt key
And then?
Amd then 'spacebar' and then 'alt' and then 'ctrl' again
Oh, ok, As you haven't got time we will leave it
I have time,
Oh you said you only have 2 mins
No, I asked you how long it will take and you said 2mins, I have plenty of time, lets keep going,.....
Oh Ok Sir, You know 'Run'?
Yes
On the start menu you see 'run'?
Yes
Click on run
Yes
What do you see?
I see Run box with a cursor, it wants me to type something
Yes, sir very good sir, type E V E N T V W R
Yes E V E N T V W R
Yes sir and click OK
Yes, (I did and I got an error message saying file not found)
And now sir what do you see?
I see an error message file not found
Oh type eventvwr with no spaces
Yes I typed with no spaces, listen to my speaker, I'll turn the volume up.....listen when I type eventvwr and press OK.....Computer makes an "error" sound.... See? did you hear that? It gives an error message file not found.
Oh, in order to help you sir I will have to conect to your computer, do you agree?
How will you do that?
OK sir type www.aammy.com and press ok
Yes, ok,
What happened? Do you see the green box "start working with ammy admin, press there and tell me you see the options.
It went to his website - but I told him it says "website blocked" I think it must be a firewall,
Do you see Admin button on the firewall?
No, I think maybe my ISP has blocked it.
OK sir well I really cannot help you.
Oh, ok, where are you from?
India, but I work in London to get good job to support my family.
Oh that's very good, well done
Yes sir, thank you sir,
OK then
Ok good bye sir
Oh By the way, I use Win 98
No sir Win (garbled)
No Win 98
No sir Win XP
NO Win 98 SE
You don't have Win XP?
No I still use Win 98
OH MY GOD!!!!! he puts phone down

:rotfl:

Wig

I think the website aammy admin is legit

esuhl

Wig wrote: »

I think the website aammy admin is legit

Groan - ignore my last post! I think you're right!

I assumed that these scams worked by getting you to go to a malicious website, but it seems that they obtain access to your PC using legitimate tools... What they do then is anyone's guess. Maybe they install malware, delete system files and tell you the only way to "fix" your PC is to hand over your credit card details... Who knows...?

McKneff

Wig wrote: »

I didn't want him to be able to give up so easily, I knew he would have very little luck with me. So I just said 'yes' when he said "Your Windows Operating system"

He said first step was to go to desktop
-His name was Arthur Jones by the way, and he was from India but he was calling from London, where had moved to from India to get a good job and support his family .....

Opening Spiel
How long will this take?
Only 2 mins Sir.
Ok
Desktop>Start> and "do you see "Documents""?
Yes
Underneath documents do you see 'computer'
No, I see 'Settings'
Do you see computer anywhere?
No
Do you see computer anywhere?
On my desktop I see my computer icon
Oh ok good, right click on my computer icon and select xxxxxx (can't remeber what he said manager or something)
I don't have manager
Oh what do you have?
I have, open, explore, find...
Oh dear, ok, Look on your keyboard
yes
Do see bottom left a windows flag key?
No, bottom left is a 'ctrl' key
No flag key next to it?
No, ctrl key then Alt key
And then?
Amd then 'spacebar' and then 'alt' and then 'ctrl' again
Oh, ok, As you haven't got time we will leave it
I have time,
Oh you said you only have 2 mins
No, I asked you how long it will take and you said 2mins, I have plenty of time, lets keep going,.....
Oh Ok Sir, You know 'Run'?
Yes
On the start menu you see 'run'?
Yes
Click on run
Yes
What do you see?
I see Run box with a cursor, it wants me to type something
Yes, sir very good sir, type E V E N T V W R
Yes E V E N T V W R
Yes sir and click OK
Yes, (I did and I got an error message saying file not found)
And now sir what do you see?
I see an error message file not found
Oh type eventvwr with no spaces
Yes I typed with no spaces, listen to my speaker, I'll turn the volume up.....listen when I type eventvwr and press OK.....Computer makes an "error" sound.... See? did you hear that? It gives an error message file not found.
Oh, in order to help you sir I will have to conect to your computer, do you agree?
How will you do that?
OK sir type www.aammy.com and press ok
Yes, ok,
What happened? Do you see the green box "start working with ammy admin, press there and tell me you see the options.
It went to his website - but I told him it says "website blocked" I think it must be a firewall,
Do you see Admin button on the firewall?
No, I think maybe my ISP has blocked it.
OK sir well I really cannot help you.
Oh, ok, where are you from?
India, but I work in London to get good job to support my family.
Oh that's very good, well done
Yes sir, thank you sir,
OK then
Ok good bye sir
Oh By the way, I use Win 98
No sir Win (garbled)
No Win 98
No sir Win XP
NO Win 98 SE
You don't have Win XP?
No I still use Win 98
OH MY GOD!!!!! he puts phone down

:rotfl:

:T:T Brilliant, I normally just say 'just a moment' put the phone down and go watch the telly.

I went back 15 minutes later one time and the guy was still there.:rotfl::rotfl::rotfl:

spannerzone

esuhl wrote: »

Groan - ignore my last post! I think you're right!

I assumed that these scams worked by getting you to go to a malicious website, but it seems that they obtain access to your PC using legitimate tools... What they do then is anyone's guess. Maybe they install malware, delete system files and tell you the only way to "fix" your PC is to hand over your credit card details... Who knows...?

No they don't need to break your PC because once they find a sucker they can do a few things and make it appear they've fixed it. Why would they waste time installing malware when the illusion is not required? the person has already been conned if they've allowed remote access to fix a problem that doesn't exist.

It's been said many times that they get you to download LogMein of similar remote access software and then they spend 10 minutes remotely clicking things such as event viewer, downloading and using CCleaner and such like to 'fix' your computer problem. Once they've extracted £129 from your credit card they're done and off to find another mug... much easier than installing malware!

What many people then speculate is that your PC is now infected by a trojan that could then be a security threat....while this could be a possibility I have never seen any evidence that it's ever happened to anyone. I suspect the cheeky scammers want to find a gulliable person and earn £129 for 15 minutes easy work and move onto the next poor sod......how much could they actually acheive by leaving a trojan on a home PC? sure they might get lucky but do people store bank details, pin and password documents on their machines that could be found by these scammers that sposedly now have access to your PC?

Of course virus infections are a real threat, can be disatrous and do this very thing, sneak onto a PC, leech out personal data or act as zombies for other tasks, and they exist but don't need slick fake call centres to install the viruses, the viruses get in by other automated means....often by users downloading dodgy software, cracks, warez or such like

Lincoln_Imp

Should have said you was running DOS 5.0

spannerzone

yeah that should put them off!