"Sir, I am calling from Microsoft and we have detected an issue with your windows installation."
JACKPOT.
I was connected to someone who spoke German. How convenient.
The nice lady helped me to set up the RDP access in the Windows 7 VM.
She then led me through a lengthy process. The system was infected, you could clearly see that at the terminal output (only really colored in red).
"There is a service fee to clean the system."
"I have my credit card data stored in a file, wait a minute."
The lady then copied the file directly to her own computer. Then it became quiet in the line. Perhaps the ransomware coupled to the file was responsible for this, which otherwise serves as a test payload for customer systems.
Of course, the variant only encrypts five files and then stops. So if you set it that way. Much cursing and the conversation was abruptly interrupted from her side.
Maybe I call back, pretend to be a Microsoft employee and offer to disinfect the computer?
I disagree, they know what they are doing. Also, check out Kitboga https://www.twitch.tv/kitboga if you like this kind of revenge. He literally plays the old woman that the scammers, yes scammers are trying to steal from. These scammers have no morals and deserve everything coming at them.
These people are not stealing bread from a baker/corporation, they are stealing bread from an individual who worked for that bread and is currently feeding their family with it. The situation the scammers create is based on lies.
I disagree. They said they have encrypted some files on the scammers computer by planting supposed banking credentials which they did copy without any consent. Having watched some similar experiences in YouTube I can say theft of banking credentials or personal data is commonplace. They probably did prevent misuse of some stolen banking or personal information.
its possible they unintentionaly gave a scammer a sample of ransomware code they could then reverse engineer.
the results could be an asymetric irony.
they could have made the scammer even more formidable.
17 comments
[ 4.3 ms ] story [ 188 ms ] threadThe phone just rang at the CCC.
"Sir, I am calling from Microsoft and we have detected an issue with your windows installation."
JACKPOT.
I was connected to someone who spoke German. How convenient.
The nice lady helped me to set up the RDP access in the Windows 7 VM.
She then led me through a lengthy process. The system was infected, you could clearly see that at the terminal output (only really colored in red).
"There is a service fee to clean the system."
"I have my credit card data stored in a file, wait a minute."
The lady then copied the file directly to her own computer. Then it became quiet in the line. Perhaps the ransomware coupled to the file was responsible for this, which otherwise serves as a test payload for customer systems.
Of course, the variant only encrypts five files and then stops. So if you set it that way. Much cursing and the conversation was abruptly interrupted from her side.
Maybe I call back, pretend to be a Microsoft employee and offer to disinfect the computer?
source (in German): https://twitter.com/grauhut/status/1082650738927591425
Some poor man/woman on the other side of the line probably lost a day of work because of this!
The best thing to do with these scammers is to ignore.
https://news.ycombinator.com/newsguidelines.html
And as for ignoring criminal activity - do you also suggest we rid ourselves of our judicial system?