Scammers Impersonating Microsoft in Pop-ups Claiming Your Computer Has Been Infected with Spyware
In a new scam, scammers are pretending to be Microsoft and displaying pop-ups on people’s screens, warning them that their computers have been infected with spyware. These pop-ups prompt users to call a phone number for support. However, if you make the call, you’ll be connected to a scammer who will try to convince you to download remote access software, giving them control over your computer.
If you encounter one of these pop-ups, it’s important not to call any phone numbers or click on any links.
To learn more about how this scam works and get advice on what to do if your device is targeted, continue reading.
Outsmart the Scammers – Our free scam alert service can help you spot and avoid the latest scams
Microsoft ‘Spyware Alert’ Pop-up Scam
The scam involves a small pop-up appearing on your screen, claiming that a virus has been detected on your device and that your personal and financial information is at risk. The pop-up provides a fake number to contact Microsoft’s customer support department. It also presents two buttons, one saying ‘deny’ and the other saying ‘support’. Clicking on either button may result in malware being downloaded onto your device.
Behind this small pop-up is a larger one that states ‘Microsoft security – spyware alert’. It warns that your device is infected with a ‘Trojan:S Locker’ virus, which could lead to a loss of personal and stored data, confidential information leaks, and browser errors.
Microsoft emphasizes on its website that genuine error and warning messages never include a phone number. They also advise users to only download software from official Microsoft partner websites or the Microsoft Store.
What Happens If You Call the Scammer?
Reports have shown different outcomes for people who called the number on these pop-ups.
One victim stated that the person on the other end of the line informed them that illegal content had been downloaded on their computer and requested remote access to fix the issue. While in control of the computer, the scammer asked the victim to access their bank account to check for any unauthorized transactions.
Another victim was told that their device would be scanned during the call. The scammer claimed that the victim’s financial information had been compromised and connected them to a ‘secure’ line with a representative from the ‘bank’. This representative was actually another scammer who instructed the victim to move their money into a bitcoin account for security.
How to Remove a Dodgy Pop-up
If you encounter one of these pop-ups, close your browser and shut down your device. In some cases, screens may freeze, in which case you should hold down the power button on your computer to turn it off.
The pop-up may appear due to malware on your device or visiting a suspicious website in the past. After turning your computer back on, run a scan using your antivirus software before going online again.
What to Do If You’ve Given a Scammer Access to Your Device
If the remote access software is still running, press the disconnect button. Next, shut down your device and turn off your Wi-Fi at the router.
When you turn the device back on, remove the software. You should be able to find it under your recent downloads. Check for any new programs or files installed by the scammer. Finally, reset the passwords for any accounts you access using the device.
If you have lost money to this scam, immediately call your bank using the number on the back of your card and report the scam to Action Fraud.