eldery father phoned up by scammers pretending they were from talktalk

Inigo_Montoya

my eldery father was phoned up by scammers pretending they were from talktalk

they had all his account details I assume from the talktalk hack last year

its confusing as to exactly what happened but apparently only they managed to get him to start fiddling with his PC before they gave up as he started to cotton on as to what might be happening (they put the phone down on him)

According to him they got him to open a 'run' box (windows key + R) then type something begining with 'A' and apparently also containing a phrase something similiar to 'ctrl'

When he did this he said a long list of info appeared some of which were the status of items which were 'ON / OFF'

Does anybody know what program he might have run ?

Apparently after this he did nothing else & the phone calll ended so it sounds like he is safe

ballyblack

'List of errors' maybe which is normal on a PC

It looks like they were probably inviting themselves to fix for a fee before call was terminated

prowla

Remote Desktop Access?

http://uk.pcmag.com/operating-systems-and-platforms/13317/guide/how-to-set-up-remote-desktop-access

Enable that, let them login to your PC, let them steal your information, let them charge you a fee.

I_have_spoken

>my eldery father was phoned up by scammers<

Install a trueCall

System

Hi

"Apparently after this he did nothing else & the phone calll ended so it sounds like he is safe "

I would assume not.

Check and disable anything suggesting Remote Desktop Access/Protocol, or that allows others to help you if you have a problem.

It may be

Control Panel; Remote-App and Desktop Connections.

dggar

Inigo_Montoya wrote: »

According to him they got him to open a 'run' box (windows key + R) then type something begining with 'A' and apparently also containing a phrase something similiar to 'ctrl'

When he did this he said a long list of info appeared some of which were the status of items which were 'ON / OFF'

Does anybody know what program he might have run ?

Apparently after this he did nothing else & the phone calll ended so it sounds like he is safe

Probably "Administrative Tools"
From there you go to "Computer Management" and then to "Event Viewer"


Event Viewer will list Processes that are running


Some events will have Red icons next to them.


The scammers will tell you that this is proof that your computer is infected with viruses and they will help you sort out the problem.

LHW99

What version of Windows? Remote access can hide in different places on different OS

prowla

Coincidentally, I had a call from one today; I answered the first person's questions satisfactorily, so he put me through to a senior colleague.

The senior colleague got me to look in the event log and confirm there were critical messages and then said that they were evidence of bad things and he could clear them for me.

When I said I didn't need his help, he said I would have to pay him to clear them; when I replied thanks all the same but I didn't need his help, he said that they already had my bank details and were going to take money.

dggar

prowla wrote: »

..............

When I said I didn't need his help, he said I would have to pay him to clear them; when I replied thanks all the same but I didn't need his help, he said that they already had my bank details and were going to take money.

And did you believe him?

prowla

dggar wrote: »

And did you believe him?

I didn't go on to ask why, if he already had my bank details, he needed to get onto my PC! :rotfl:

TalkTalk

Hi all,

Please be vigilant with these calls, we’re running a beat he scammers campaign, please check out our hep site.

If you’re TalkTalk customer and receiving these types of calls, please get in touch with us so we can get these reported. If you’re not TalkTalk customers, please report these to your current provider.

Thanks
Abbie