Windows Defender Firewall Alert Pop-up Scam
During an examination of unreliable websites, our researchers identified a technical support scam known as the "Windows Defender Firewall Alert." This fraudulent scheme replicates Windows alerts and falsely asserts that the user's device is infected, aiming to entice the victim into contacting a fabricated helpline as part of an elaborate scam.
Upon accessing a site featuring the "Windows Defender Firewall Alert," the background page simulated the Blue screen error, a critical Windows system error. The ensuing pop-up, purportedly an alert from Microsoft Defender Antivirus (formerly Windows Defender), claimed the presence of adware on the visitor's device and detailed potential threats associated with the software. The user was then prompted to call a support line.
Opting to click the "Continue to website" button on the pop-up led to a different page mimicking the Microsoft website. This page incorporated multiple pop-up windows, including a simulated system scan and various threat reports, consistently urging the user to contact the helpline.
It is crucial to emphasize that all information presented by "Windows Defender Firewall Alert" is false; no website possesses the capability to detect threats on visitors' devices. Additionally, this scam is not affiliated with Windows, Microsoft, or any legitimate products, services, or entities.
Upon initiating contact, the scammers adopt the guise of support technicians, maintaining this pretense throughout the scheme. The fraudulent activities may transpire entirely over the phone, with cybercriminals deceiving victims into engaging in financial transactions, divulging sensitive information, purchasing products, downloading/installing software (including malware), or undertaking other actions.
How Can You Recognize a Tech Support Scam?
Recognizing a tech support scam is crucial to avoiding potential fraud and protecting your personal information. Here are some common signs that can help you identify a tech support scam:
Unsolicited Calls or Pop-Ups:
Legitimate tech support services do not make unsolicited calls or display pop-ups on your computer warning about supposed issues. If you receive an unexpected call or see a pop-up claiming to be from tech support, be cautious.
Claims of Virus Detection:
Scammers often claim to have detected viruses or malware on your device, even without any prior indication. Legitimate security software will not contact you out of the blue to report issues.
Pressure to Act Immediately:
Tech support scammers often use urgency as a tactic, claiming that your computer is at immediate risk and urging you to take immediate action. They may ask you to provide personal information or grant remote access to your computer.
Requests for Remote Access:
Legitimate tech support services will not ask for remote access to your computer unless you have initiated contact. If someone unsolicited asks for remote access, it's likely a scam.
Asking for Payment:
Tech support scams often involve requests for payment for supposed services or fixes. Legitimate tech support services do not charge you for providing help with common issues.
Use of Fear or Threats:
Scammers may use fear tactics, such as threatening to disable your computer or report you to the authorities if you don't comply. Legitimate tech support does not resort to such threats.
Generic Greetings:
Scam calls often start with generic greetings like "Dear customer" or "Dear user" rather than addressing you by your name. Legitimate companies usually have your information and will address you personally.
