Cloud

3/29/2018
10:15 AM
50%
50%

FBI IC3: Tech Support Scam Losses Rose 86% in 2017

Most victims are in the US, but FBI IC3 has logged cases from 85 different countries.

Tech support scams last year resulted in $15 million in losses last year, an increase of 86% over 2016, according to the FBI Internet Crime Complaint Center (IC3).

The IC3 received 11,000 complaints by victims of tech support fraud last year, most of whom were in the US. But victims in 85 countries have reported incidents to the agency. These scams typically involve a criminal claiming to provide customer, security, or technical support, but instead aim to steal money from the victim. 

"This type of fraud continues to be a problematic and widespread scam," the IC3 said in an alert published today. "As this type of fraud has become more commonplace, criminals have started to pose as government agents, even offering to recover supposed losses related to tech support fraud schemes or to request financial assistance with 'apprehending' criminals."

The scam comes via phone calls, search engine ads, pop-up messages, locked screen messages, and phishing emails, the agency said. "Some recent complaints involve criminals posing as technical support representatives for GPS, printer, or cable companies, or support for virtual currency exchangers." 

Read more here.

Interop ITX 2018

Join Dark Reading LIVE for two cybersecurity summits at Interop ITX. Learn from the industry’s most knowledgeable IT security experts. Check out the security track here. Register with Promo Code DR200 and save $200.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
4/4/2018 | 6:52:04 PM
The other 84
I'm curious what the other 84 are, and how many are African countries.

African nations, on the whole are expanding in Internet connectivity faster than other nations, yet data-protection regimes have failed to keep up. ( See, e.g., msn.com/en-us/news/technology/in-africa-scant-data-protection-leaves-internet-users-exposed/ar-AAvt0YD )

My suspicion, therefore, is that few African countries indeed have been brought to FBI IC3's attention -- not because these and other scams aren't victimizing people in these countries, but because of a lack of reporting or reporting infrastructure.
aolcustomerservice
50%
50%
aolcustomerservice,
User Rank: Apprentice
4/3/2018 | 3:05:28 AM
Windows security
FBI work well otherwise it is very difficult to find a scam. In India, I can say it impossible Because It is a country with lesser technology.  https://babasupport.org/microsoft/windows-7-customer-care-helpline/373 
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11505
PUBLISHED: 2018-05-26
The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.
CVE-2018-6409
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
CVE-2018-6410
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.
CVE-2018-6411
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
CVE-2018-11500
PUBLISHED: 2018-05-26
An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account.