Fake Microsoft Scanner Secretly Sends Victim Banking and Remote Access Data to Telegram
ID: 757eaf95-59ab-5614-b128-7e9dff2a252c
STIX ID: report--757eaf95-59ab-5614-b128-7e9dff2a252c
Feed Name: Cyber Press
Threat Score
A widespread refund-scam campaign deploys fake Microsoft-branded scanner websites that fabricate security warnings, coerce users to remove third-party antivirus, and harvest extensive personal, financial, and remote-access credentials before facilitating fraudulent refund phone calls; researchers found 11 related sites and provided indicators (157.230.180.90 and detectsysscanner.at) and technical details of the scam’s data-collection and manipulation techniques.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.