Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud
ID: bff00305-d399-5895-af04-a2a945d697fd
STIX ID: report--bff00305-d399-5895-af04-a2a945d697fd
Feed Name: GBHackers
Threat Score
A cluster of Microsoft‑impersonating 'SysScan' websites presents fake in-browser security scans to falsely report critical failures, instruct victims to disable antivirus, collect sensitive banking and contact data, and coax victims into granting remote-access; researchers found 11 domains hosted on a single server, documented exfiltration to Telegram, and published IOCs including one IP and multiple domains.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.