Friday, August 11, 2017

Tech Scammer Confronts DarkComet and Cloaked VirtualBox





"Skip to the fun DarkComet confrontation at 43:00

"Number called: 888-790-5365

"Issue called about: Annoying popup saying I might have a virus.

"Action taken before calling: 'Unplugged my computer.'

"Virtual Machine Stats:
Modified BIOS information to remove references to VirtualBox
Left a link to backdoor trojan DarkComet on the desktop so I can launch it.

"Companies mentioned by scammer in the video:
Right Help Desk
Mountain View, CA

"Cyber Tech Support
Delaware

"The scammers are now opening up msinfo32 to check for virtual machines. Remember guys, modify your BIOS and uninstall the guest additions to make sure they can't tell right away.

"I might make a tutorial on how to set up a VirtualBox to hide it from the scammers if enough people are interested."

No comments:

Post a Comment