Sophisticated scam about windows certificate?

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK

In article , Terry Pinnell
wrote:


He'll be calling me back this afternoon and so I'd appreciate any further
info or
advice. Is it conceivable that the company *does* have evidence that my PC
has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

it's a scam.

On 09/10/2019 13:19, Terry Pinnell wrote:
A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK

If you've installed TeamViewer then he has probably set it up so that he
can come back anytime to your PC (without you knowing).
Your bet bet is to un-install it before he takes your treasured stuff
(but you may be too late).

First of all, there's nothing sophisticated about cold calling. All
such calls should be ignored.

"Terry Pinnell" wrote:
... He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen.

It was extremely foolish of you to allow access.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked

He might now, if you've allowed access. You don't know what he's done
to your PC or dumped on it.

and *does* offer a service (worthwhile or otherwise) in removing those?

Of course not. It's a scam and you should know better. Don't allow any
further access.

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!

Sites get hacked and passwords get stolen or accounts are compromised
(e.g. Yahoo). You should change those passwords.

Joskin wrote:

On 09/10/2019 13:19, Terry Pinnell wrote:
A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK

If you've installed TeamViewer then he has probably set it up so that he
can come back anytime to your PC (without you knowing).
Your bet bet is to un-install it before he takes your treasured stuff
(but you may be too late).

I haven't installed TeamViewer!

Terry, East Grinstead, UK

Terry Pinnell wrote:

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK


I requested an email and paste it below:
--------------------

Subject: Service Center
From: Service Center
Date: Wed, 9 Oct 2019 17:56:55 +0530

Hello Mr. Terry Pinnell,

We have found your network have been hacked by hackers. Hackers are trying
to misuse your IP address and your email. So we have to protect your
identity by blocking those hackers and we have to install network security
to protect your identity. If we can't block those hackers, those hackers
will destroy your network. And if the network will be destroyed by those
hackers then whatever the devices you have, connected with same network,
every devices could be stop working.

That is the reason, Our technical supervisor, Mr. Roger Lucas called you to
show you all the problems and suggest you about the precaution. Security,
Software and Services, you will be receiving free of cost from our company
but you have to make a registration in our company to install a new Windows
certificate for your computer. And for making that registration, there is a
cost is involved.

We have three plans:
2 Year: 259 GBP
5 Year: 399 GBP
Life Time: 559 GBP
Decision is your's, you have to choose any of the plan, which is your
suitable.

Thanks,
Team Ridhima

Terry Pinnell wrote:
Terry Pinnell wrote:

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK


I requested an email and paste it below:
--------------------

Subject: Service Center
From: Service Center
Date: Wed, 9 Oct 2019 17:56:55 +0530

Hello Mr. Terry Pinnell,

We have found your network have been hacked by hackers. Hackers are trying
to misuse your IP address and your email. So we have to protect your
identity by blocking those hackers and we have to install network security
to protect your identity. If we can't block those hackers, those hackers
will destroy your network. And if the network will be destroyed by those
hackers then whatever the devices you have, connected with same network,
every devices could be stop working.

That is the reason, Our technical supervisor, Mr. Roger Lucas called you to
show you all the problems and suggest you about the precaution. Security,
Software and Services, you will be receiving free of cost from our company
but you have to make a registration in our company to install a new Windows
certificate for your computer. And for making that registration, there is a
cost is involved.

We have three plans:
2 Year: 259 GBP
5 Year: 399 GBP
Life Time: 559 GBP
Decision is your's, you have to choose any of the plan, which is your
suitable.

Thanks,
Team Ridhima


You're being extorted by a person with horrid English. I would reinstall
Windows to make sure his Teamviewer can't view or change your computer
anymore. OR, switch to Linux.

On 10/9/2019 9:04 AM, Terry Pinnell wrote:
Terry Pinnell wrote:

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?

BTW, I get regular scam emails claiming that my PC has been hacked and claiming to
know 'my password'. Some of those string match one or two of my dozen or so
passwords. Needless to say, no bit coins have changed hands!


Terry, East Grinstead, UK


I requested an email and paste it below:
--------------------

Subject: Service Center
From: Service Center
Date: Wed, 9 Oct 2019 17:56:55 +0530

Hello Mr. Terry Pinnell,

We have found your network have been hacked by hackers. Hackers are trying
to misuse your IP address and your email. So we have to protect your
identity by blocking those hackers and we have to install network security
to protect your identity. If we can't block those hackers, those hackers
will destroy your network. And if the network will be destroyed by those
hackers then whatever the devices you have, connected with same network,
every devices could be stop working.

That is the reason, Our technical supervisor, Mr. Roger Lucas called you to
show you all the problems and suggest you about the precaution. Security,
Software and Services, you will be receiving free of cost from our company
but you have to make a registration in our company to install a new Windows
certificate for your computer. And for making that registration, there is a
cost is involved.

We have three plans:
2 Year: 259 GBP
5 Year: 399 GBP
Life Time: 559 GBP
Decision is your's, you have to choose any of the plan, which is your
suitable.

Thanks,
Team Ridhima

The minute he said something about a program I did not have on my
computer I would have hung up.

However, the other day I was bored. A scammer called me and said they
had detected a problem with my computer. I mustered all of the
enthusiasm I could generate thanked him for calling and asked him "Which
Computer?" He stammered and I explained I had multiple computers, and
we could only solve the problem if I knew the specific computer. This
continued for about 6 minute before HE hung up on me.

If I were in your situation I would run a complete virus scan using the
virus program on your computer. I would also download something like
Malwarebytes and scanning with it.

I would never give an unknown caller access to my computer.
--
Judge your ancestors by how well they met their standards not yours.
They did not know your standards, so could not try to meet them.

On Wed, 09 Oct 2019 13:19:40 +0100, Terry Pinnell
wrote:

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

I've had these scam calls a few times. I always let the caller talk
for as long as I can. I assume they have some expense. I tried the
number. It belongs to Travanya Holidays, Chandigarh, India. SFAIK the
call didn't cost me anything.

Steve

--
http://www.npsnn.com

On 09/10/2019 13:19, Terry Pinnell wrote:

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?


Yes it's a genuine Google Security Services call. they do it all the
time with old demented individuals who can't look after themselves. I'm
surprised they didn't offer to visit you!!. It's all part of the service
Google provides. When he calls back you'll be asked to install a
software on your machine so that he can fix it for you. Do it and
you'll be happy ever after.

Good luck and let us know how it all went.




--
With over 1,000,000 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

On 09/10/2019 14:18, Weatherman wrote:



You're being extorted by a person with horrid English.

And you think you know this because of your experience of abusing young
boys.

How many boys did you abuse last week? Can you give us a figure here?




--
With over 1,000,000 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

On Wed, 09 Oct 2019 14:04:26 +0100, Terry Pinnell
wrote:



I requested an email and paste it below:
--------------------

Subject: Service Center
From: Service Center
Date: Wed, 9 Oct 2019 17:56:55 +0530

Email from a gmail email address tells you it's a scam. Are you really
so thick?

Peter Johnson wrote:

On Wed, 09 Oct 2019 14:04:26 +0100, Terry Pinnell
wrote:



I requested an email and paste it below:
--------------------

Subject: Service Center
From: Service Center
Date: Wed, 9 Oct 2019 17:56:55 +0530

Email from a gmail email address tells you it's a scam. Are you really
so thick?

Do you and several other respondents not take the trouble to think and read more
carefully before you rattle off your answers?

1. I did not give him access. He had it before he called. That's how he tried to
convince me that parties unknown had hacked my PC. And thus gained my attention. My
assumption was naturally that *he* was said hacker. And a persistent and relatively
intelligent one at that, staying at it for well over an hour.

2. Although it was already 95% obviously a scam, I persisted in my request for an
email. I received that *after* my earlier post. A scant read took the odds to 100%.
(Interestingly it contrasted greatly with the fluency of the phone caller.)


So, to anyone with any constructive suggestions, my worries are as follows:

1. How did they get access to my PC before the call so that they could immediately
start, in their terms, "showing me evidence of the hacking" etc?

2. How can I ensure that this cannot happen without my authority? Would it for
example be prudent to disable one or more of the following services, at least
temporarily?
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Desktop Configuration
Remote Desktop Services

3. There was an implied threat that unless I bought the 'new registration', my PC
would be further seriously hacked tonight. Obviously he would imply that. But (apart
from my usual alertness, Defender, CCleaner, MalwareBytes, inconveniently changing a
couple of much-used email passwords, etc) how can I satisfy myself that this cannot
happen?

Terry, UK

On Wed, 09 Oct 2019 13:19:40 +0100, Terry Pinnell
wrote:

A couple of hours ago I was contacted by someone claiming to be from Google Security
Services. Texas based, he said. I get several scam calls a week and handled this in
my usual fashion with a "Not interested, don't call me again" and ended the call.
But unusually this one called straight back and got me listening for a while. At my
insistence he gave me a phone number of 18005321200, which I've not yet tried. He
claimed that my PC had been hacked and he proceeded to demonstrate evidence that he
had access etc. He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

At my further insistence he escalated the call to a manager "Roger Lucas" from the
Indian company Ridhima Enterprise. That lasted an hour, during which he too me
through views of my Services, Settings, etc. As I expected (although I was surprised
how long he was prepared to continue the call) at the end he went for the sale.
Specifically he asked me to register a new 'Windows Certificate': 1 Year £289, 3 Yr
£399, Life £799.

Naturally I asked for an email setting it all out (which I half-heartedly hoped
might help tracking the scammer down) but - surprise! - he was VERY anxious to
complete the transaction.

He'll be calling me back this afternoon and so I'd appreciate any further info or
advice. Is it conceivable that the company *does* have evidence that my PC has been
hacked and *does* offer a service (worthwhile or otherwise) in removing those?


No, it's not. He wasn't from Google. He's a scammer.

You say " He was using a service called TeamViewer, whose details he
popped up on my screen." If he popped something up on your screen,
that means you gave him access to your computer. If you let him into
your computer, who knows what he did there or what confidential
information he stole.

So if you did, I highly recommend that you do both of the following
immediately:

1. Do a clean reinstallation of Windows.

2. *After* reinstalling Windows, change all of your passwords,
especially any for banks or other financial sites.

Since they *might* have installed a key logger, simply changing your
passwords without first reinstalling Windows may not be good enough.

And for the future, you should never let *anyone* take control of your
computer unless it's someone you know and trust implicitly, both with
regard to his honesty and technical skills.

On Wed, 09 Oct 2019 13:19:40 +0100, Terry Pinnell
wrote:

He was using a service called TeamViewer, whose details he popped up
on my screen. (I've since called that company and that point out that anyone can use
their software.)

It is a scam.

To see stuff on your computer is one thing. To be able to enter
commands is different.

I worked with Teamviewer some years ago and they shut down a licensed
user in that area (Asia/India/Pak) as a result.

Teamviewer remote access software is free for client use. Itrequires
one side (your side) to grant permission for the other side to access
your computer with Teamviewer software over the Internet. You must
both be running the Teamviewer client software. You give them the
temporary code the Teamviewer software gives you and they can gain
access to your computer. This code generated by the Teamviewer server,
not the client software you and they run. Key point: They also have a
temporary code that the Teamviewer server gave them. You need *their*
Teamviewer license number--then they can be shut down. Simply tell
them your Teamviewer client software requires *their* license number
to allow them to be able to access your computer. Of course, you say
this is a security feature by Teamviewer to catch and stop scammers
g. Invalid license = no access. Thus, you need their license number
in order to enter it into the Teamviewer security software system. Key
point: You are NOT accessing their computer, so they do not need your
license number. Also, give them a made-up code and not the real
Teamviewer temporary pass code from the Teamviewer server. Of course,
you never give them your Teamview license number.