04/08/2022
Scam of the week series – Scam #2 – Remote Access Scams
The format for these posts is going to cover the framework of these scams to help individuals identify this scam. If you are the victim of one of these and need assistance with recovery and risk mitigation, please get in touch.
Step 1 – The Hook
Typically, these scams start with either a phone call or a prompt or pop-up on your device. If its via the phone the scammer on the other end will be trying through many methods to convince you to install a remote access program. Now these programs themselves like Anydesk, TeamViewer, RemotePC and many others are not necessarily malicious software, it is the way these scammers use them that make them dangerous. They will use information they may have obtained previously about an individual to convince them they are representing their bank, a retailer, an online account, or some other service in which they need to help/stop something from happening and they will ask you to install remote access to further this assistance.
If the method of compromise is through a pop-up or prompt on your device, the scammer is attempting to make you believe there is an error or issue with your pc and that to fix it you will need to allow them remote access to solve the issue. More on pop-up and ransomware scams coming soon.
Step 2 – The Bait
Once the scammer has convinced you to install the remote access program, then the damage begins. They will continue to ask you questions or try and distract you and ask you to go get this or that or leave the room. There argument is that they are fixing something or helping you recover something or even stopping a scammer from taking things when this is indeed what they are doing. They may know bits of information and they will use this along with other information they are gaining from the access to your device to complete the scam.
Step 3 – The Reel In
The concern with remote access programs is the amount of information a lot of us keep on devices or in email accounts or saved to other online or network connected locations. If you have sent or received ID info through your email account or have saved your card payment details to online sites or accounts or have bills and other documents saved on your desktop, all these things are vulnerable and form the basis of the misuse when a scammer takes over the device. Typically, the theft of this information and access to your online banking and other online accounts is what the scammers are after here.
Step 4 – The Catch
Once the scammer has complete control of the device, they will attempt to close you out. They may turn the screen blank on your end or they may try convince you to leave the room and do other things while the computer does its thing for a few hours. In this time they will be changing account log in details, downloading ID information, account information including passwords and contact information. This is typically your last chance to stop the actions of the scammer here, if not too late you need to make sure you turn off the devices, remove their connection to the internet, put the device into airplane mode any way to remove the connection the scammer has. Once the connection has been dropped you can try contact your banks and other important accounts to advise of the potential risk.
Step 5 – The Aftermath
This scam is one of the most compromising for personal ID information. Most people will store large amounts of information on devices for ease of access. But there needs to be a middle ground. The more accessible things are the less secure. And vice versa, there are methods like 2FA or MFA (two factor authentication or multi factor authentication) that can help increase security as well as having verbal passwords set for phone banking and things like this. If you need advice on methods to best secure yourself from this kind of event or if you have experienced this kind of event and need assistance in the mitigation of future risk, these are all things Ident IT can assist with.