Don’t Do Their Work: Spotting Common Cyber Scams
The most challenging task for a computer intruder is identifying and exploiting a weak link in the security system. As software becomes more secure and stronger authentication methods alongside improved prevention, detection and response tools are adopted, cybercriminals are increasingly targeting individuals like you. Cybercriminals find it much easier to simply ask you to install malicious software and/or execute the commands that provide them direct, ongoing access to our computer and accounts. Some examples are Click/Fix scams, tech support scams, and software install scams.
Click/Fix Scams
ClickFix is a social engineering technique in which a malicious pop-up or compromised website displays a fake error message, CAPTCHA, document issue, or other security warning that appears to require your attention. The instructions may tell you to copy text, open Run, PowerShell, Command Prompt, or Terminal, paste the text, and press Enter—causing you to execute malware yourself. Never run unexpected commands supplied by an unfamiliar website or pop-up. Legitimate sites will not require you to open a command-line tool.
Tech-Support Scams
Tech-support scams often involve fake security warnings, unsolicited calls, emails, or pop-up messages designed to convince you that your computer or account has an issue. Scammers may ask you to call a specific number, provide credentials or payment information, disable security controls, or give them remote access to your device.
It’s important to ignore unsolicited technical support contacts. Never share your passwords, approve unexpected multi-factor authentication requests, or allow an unknown person to take control of your device. If you are concerned that there is a problem, seek assistance from a local, trusted support provider.
Software Install Scams
Many software installation scams begin with phishing emails. These emails often mention important documents that can only be accessed by installing specific software. They typically provide instructions to install legitimate remote-access software such as Zoho Assist, AnyDesk, TeamViewer, or ScreenConnect. Although these are reputable products with valid uses, attackers can misuse them to remotely view and control your device, access your files and accounts, capture your passwords, and install additional malicious software.
To stay safe, do not install software in response to unsolicited emails, websites, unverified callers, or text messages without researching or consulting a trusted local support provider.