Tech-Support Scam Leverages Fraudulent McAfee Subscriptions

A newly discovered browser-based tech-support scam tricks victims into renewing fraudulent subscriptions for McAfee software. This scheme attempts to collect payment card data, as well as victims’ personal information, and initiates with a browser notification informing the victim that their McAfee subscription has expired. If users select the “Renew Now” option on the page, a new window will appear that prompts them to provide payment card details, followed by another form requiring the input of sensitive information such as name, email address, and phone number. Once completed, the user is redirected to a new page that informs them that their anti-virus subscription has been updated and they must call the number provided to download the software. If the user calls this number, they are connected with a company referred to as “Premium Technical Support” and the operator requests to remotely connect to the caller’s computer in order to install the software. Once connected, they inform the user that the payment card information was not successfully transmitted and they must purchase the software again through a website that appears to be associated with adware and unwanted software programs. The NJCCIC recommends never installing software onto systems at the request of an unsolicited phone call or pop-up message on your computer. Users who may have been affected by this scam are advised to notify their financial institutions as soon as possible and proactively monitor accounts for suspicious activity. Additionally, isolate the affected system(s) from the network and perform a full system scan using a reputable anti-virus/anti-malware solution.

Jessica Reiszel