Phishing’s just taken a new turn: scammers have taken to calling people at home to warn them about their anti-virus software and suggesting that they use a certain link to install some new improved software. Of course, it’s not what it seems.
A report in the news today suggests that up to a quarter of UK Internet users may have received such a call — although that sounds like a hugely expensive exercise. Even if it’s a tenth of that, it’s a lot of calls. It seems that the callers offer to repair your PC’s virus problems — but instead install spyware with the aim of stealing valuable personal information. This includes identity data, such as usernames and password combinations, credit card details, bank account details and the like.
A PC security campaign, Get Safe Online, reckons that up to 400 people are employed in dedicated, eastern European or Asian call centres to make this happen. According to Sharon Lemon, deputy director of the UK’s Serious and Organised Crime Agency, they could be paying up to £92,000 monthly to webmasters, presumably running small websites, to advertise their software in ignorance of its true purpose. The fact that they’re spending this much demonstrates the profit levels they must be making.
Other companies call and offer technical support but in fact do no such thing. While not as malicious, it’s still a big security hole, as they ask you to allow them to take over remote control of your PC. One reporter was brave enough to let one of these people onto his PC, and found that they offer a worthless service. He reported that they footle around on your machine for a bit and that’s it. Assuming that if you’re gullible enough to let them in, you won’t know that what they’re doing is effectively worthless.
I’ll confess that in fact this is not so new: a national newspaper reported a similar phenomenon a few months ago but this is the latest wave.
But if in doubt, don’t respond to cold calls — you probably shouldn’t anyway — and certainly never provide someone whose credentials aren’t cast-iron with access to your computer.
It’s not just you you’re protecting: like any infection, if your machine is compromised, so are a whole host of others.
Avast news
Avast has released news that its software now protects Queen Elizabeth Hospital in King’s Lynn. In 2006, the hospital realised its computer network was insecure after a series of malware attacks penetrated the incumbent anti-virus software, so managers decided to evaluate alternatives. One manager had heard about avast from a relative who had successfully used it on their home PC so the hospital downloaded a free copy and ran it on a test computer.
It worked, clearing up a mess left by a previous AV package and, as a result, the trust now has Avast running on 118 servers and over 1,500 desktops. Avast claims the trust is very happy with the results over the last four years: better security and good service.