Scam Tech Support emergencyalert.co

fake yahlover warning

While a customer was browsing clickbait sites they got a fake virus warning message from: http://www.157163rd.in/Virus%20Web/tashi.html which asks victims to call 0808 189 1317 (aka. 0-808-189-1317 / +448081891317 / 08081891317)

Message from webpage

********************************
ARDN/YahLover.worm!OSSBCCAC9FEC Infection
********************************

Call Technical Support Immediately at 0-808-189-1317

The following data will be compromised if you continue
1. Passwords
2. Browser History
3. Credit Card Information

This virus is well known for complete identity and credit card theft. Further action through this computer or any computer on the network will reveal private information and involve serious risks.

Call Technical Support Immediately at 0-808-189-1317
OK

Hard Drive is not acceptable.

The file or directory is corrupted and unreadable! Please call Support Now!. Call Toll-Free: +1-844-798-1896 To find right solution.
Are you sure you want to leave this page?
Leave Page               Stay On Page

Your computer has been Locked

Your computer with the IP address 182.74.27.50 has been infected by the Virus RDN/YahLover.worm!055BCCAC9FEC — Because System Activation KEY has expired & Your information (for example, passwords, messages, and credit cards) have been stolen. Call the Technical Support number +0-808-189-1317 to protect your files and identity from further damage.

There is a google analytics code on the page which is also used on loan4everyone.com

Also related is http://emergencyalert.co/Virus%20Web/index.html which asks victims to call 1­866­315­8808 (aka. ­866­315­8808 / +1­866­315­8808 / 1­-866­-315-­8808 / (­866) ­315 ­8808).

ALERT 0x01921457

The problem is caused by an unusual activity
performed on this machine. Error code­ S1L457.
Call customer support number 1­866­315­8808
and share this code with the agent.

Are you sure you want to leave this page?

And further lies / warning messages on the page.

Warning: Internet Security Damaged !!!
A Suspicious Connection Was Trying to Access Your Logins, Banking Details & Tracking Your Internet Activity.

Your TCP Connection Was Blocked by Your Firewall. Your Accounts May be Suspended Until You Take an Action.

Your Personal Information May Have Leaked. IMMEDIATE RESPONSE REQUIRED

Your Hard Disk May Have Trojan Virus! Please Do Not Try to Fix Manually, It May Crash Your Data.

Consequently, we are performing additional security checks to verify system security.

Please Visit Your Nearest Windows Service Center OR Call Help Desk

———————————————————
Customer Service: 1-866-315-8808 (TOLL-FREE)
———————————————————
********** IMMEDIATE RESPONSE REQUIRED **********

Please contact network administration to rectify the issue.
Please do not open internet browser for your security issue to avoid data corruption on your registery of your operating system. Please contact network administration department at 1-866-315-8808 (TOLL-FREE)

Virus Info:
A Trojan horse, or Trojan, in computing is a non-self-replicating type of malware program containing malicious code that, when executed, carries out actions determined by the nature of the Trojan, typically causing loss or theft of data, and possible system harm. The term is derived from the story of the wooden horse used to trick defenders of Troy into taking concealed warriors into their city in ancient Greece, because computer Trojans often employ a form of social engineering, presenting themselves as routine, useful, or interesting in order to persuade victims to install them on their computers.

A Trojan often acts as a backdoor, contacting a controller which can then have unauthorized access to the affected computer. The Trojan and backdoors are not themselves easily detectable, but if they carry out significant computing or communications activity may cause the computer to run noticeably slowly. Malicious programs are classified as Trojans if they do not attempt to inject themselves into other files (computer virus) or otherwise propagate themselves (worm).

A computer may host a Trojan via a malicious program a user is duped into executing files or browsing internet.
Please contact network administration department at 1-866-315-8808 (TOLL-FREE)

This website has a Google Analytics code which has also been used on:

mailbox-plus.com
movieviewonline.com
http://www.breakingnews.website

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

3 Responses to Scam Tech Support emergencyalert.co

  1. Michael Wilson says:

    Hello. Can you help? I was the victim of a scam when I tried to buy a microwave. I lost £326.20 pence. I have reported it to action fraud. I have also updated my report to say that the website is back up and running bi was scammed with http://www.tradeelectronixx.co.uk. They are now using the same name with .com. I am concerned to stop other people falling victim to them. I tried to pay with a visa debit card. I was advised that the bank had declined payment and they asked me to pay by a BACS transfer to a Barclays Bank account. I think other people have fallen victim to this. I think the .co.uk site has been taken down but the .com site is running. Can you please alert people. Can you also let me know who else I might contact. Barclays Bank are saying the account was empty when I notified them so I cannot have any money back. Thank you. Michael Wilson

    Sent from my iPhone

    >

  2. You’ve commented on the wrong article but all the information and advice I, and the police, have is on https://thecomputerperson.wordpress.com/2015/07/29/bank-accounts-associated-with-electronic-goods-scams/

    In summary: Report it to Action Fraud (which you’ve done).
    Report it to your bank and ask them the procedure to claim the money back for “Internet auction fraud”.. and take it as far as you can (financial ombudsman?).
    Ask the destination account bank when the first date they were made aware of the account was, if you sent payment after this date they are probably more liable to refund you.

    If you read the comments on the page I link to above – some people have managed to get their money back. Keep at it.

  3. Katie says:

    I’ve got the same message what can I do??

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s