The gendarmerie is warning about this fake technical support campaign, not new but still in progress, don’t be fooled!

The national gendarmerie and the command of the Ministry of the Interior in cyberspace are warning against a widespread and persistent scam: false computer repair fraud. This messaging or pop-up scam aims to extract personal data and money from victims by posing as computer technical assistance.

The national gendarmerie is sounding the alarm about a still very active cybercrime campaign. After warning of the scam involving overly tempting marketing job offers, the Cybermalveillance.gouv site warns of the scourge of fake technical support. This modus operandi consists of making the Internet user believe that their computer is infected by a virus, or that a bug is preventing it from running correctly and that it requires emergency intervention. With an intrusive message or pop-up, fake technicians then offer their remote repair services, for a fee of course.

Of course, the goal of cybercriminals is clear and unchanging: to extort sensitive data and blackmail the victim into plundering. Although known, this form of fraud persists and continues to trap numerous victims each year in France.

The fake technical support scam is evolving to become more formidable

According to the latest activity report published on the Cybermalveillance.gouv site, the fake Microsoft or Apple technical support scam is among the main threats for individuals in 2023, with 12,000 assistance requests and 140,000 consultations of the article in question. But businesses and communities, especially those lacking internal IT support, are also targeted by this formidable threat which does not diminish in intensity.

If the triggering methods initiating the scam (phishing by malicious email, misleading sponsored pages, etc.) remain classic, the techniques of cybercriminals have taken a much more virulent turn since the end of 2022. They are no longer content with charging a simple bogus troubleshooting, but go so far as to take over online bank accounts.

Under the pretext of a viral infection believed to have compromised them, the criminals take control of banking access. They then manipulate the victim to make them believe that they must validate certain “security” operations, which in reality allow their accounts to be plundered. This very elaborate social engineering modus operandi is inspired by the fake bank advisor scam.

As for the amounts extorted, they have been multiplied. While the damages have until now been around a few hundred euros, they can today reach several tens of thousands of euros per victim, depending on the accounts emptied.

How to protect yourself from fake tech support scams

On their respective X.com accounts, the national gendarmerie and the command of the Ministry of the Interior in cyberspace remind us that this scam is not new, but that it is evolving to claim ever more victims and more profits. If caution is always the first recommendation, Clubic is teaming up with the site Cybermalveillance.gouv to give you some advice to avoid being scammed as well as on the conduct to adopt in the event that you have, unfortunately, fallen into the trap.

First of all, regularly apply system and software security updates, especially browsers. Likewise, keep your antivirus up to date and activate your firewalls to block malicious applications.

Then, when surfing the Internet, avoid unsafe and illicit sites, where it is not uncommon to catch a virus or be phished with malicious advertising. Of course, never install a program, software or application that you know is pirated or whose exact origin you do not know. If possible, browse without administrator rights to limit the damage in the event of an infection.

Finally, the recommendations for use are still relevant today, such as not opening emails, attachments and links from unknown senders, making regular backups on external media or separate clouds, and keeping in mind that never no financial or official organization will ask you for money directly.

If, however, you have been the victim of this scam, do not call the number displayed and keep all the evidence (screenshots, numbers, documents, etc.). Restart the device that seems to be stuck, this may be enough to resolve the problem. Clean your browser (delete cache, cookies, reset settings). Uninstall any suspicious applications installed by the criminals, one by one, then perform a full antivirus scan of your machine.

If the hacker has already taken remote control of your device, uninstall the software used and change all passwords. Immediately object to your bank if you have provided your bank details. Report the facts on the Pharos platform and file a complaint with the authorities. You can also contact the Info Escroqueries platform for advice on these procedures by following this link.

Sources: Cybermalveillance.gouv, Command of the Ministry of the Interior in cyberspace (on X.com)