Skip to main content

Tech support scams are getting more sophisticated, says new study

tech support scams malwarebytes call center
Image used with permission by copyright holder
Tech support scams are becoming more common and the criminals perpetrating them are becoming more sophisticated, according to a new report by security firm Malwarebytes.

Tech support scams began to rise in prominence in 2008 with cold calls to random numbers. Scammers pretending to be Microsoft technicians would try to convince targets that their computers were infected and faulty and that the technicians needed to take control of the machines to fix them. Since then their techniques have become much more nuanced.

Malwarebytes details tactics like software activation scams, where victims download a program that looks legit but are then required to make further payment to use the software, and malicious advertising that claims you’re infected with malware and should call a specified number for help. The tricks cast a wide net but typically the perpetrators are hoping to catch users who are not so tech savvy.

In some cases, scammers re-sell legitimate software at a huge mark-up and offer phony support services. Culprits have even used Malwarebytes’ software to extort money, said its CEO Marcin Kleczynski.

“As a result of the abuse of our brand and products, we often have people come to us when the scammers fall short of providing services,” said Kleczynski. “That’s when we have to tell victims that they were defrauded and that there’s little chance of them recovering their lost money.”

According to the researchers, these scams have grown into their own clandestine industry with companies in the U.S., U.K., and India that front as legitimate businesses but carry out support scams.

One of the researchers for Malwarebytes, who declined to be named, said India has long been a hotbed for support scams targeting victims globally. Just this past weekend, Indian authorities arrested a man dubbed the “guru” of call center scams. But there’s also a glut of such companies in the U.S. of late, operating out of Florida in particular.

Malwarebytes has been investigating several companies and works directly with the FTC to report and shut down scamming operations. It contributed to an investigation into Florida’s OMG Tech Help in 2014, and during the summer, the phony tech support company settled its case with the FTC by surrendering its assets and paying a fine.

In this latest report, Malwarebytes accuses more companies of scamming people. One such company is the U.K.’s Emobilize, which describes itself a web development services company. Malwarebytes claims otherwise and the firm has been accused by average users as well.

The company ardently denies the allegations. “As a growing business we have multiple competitors who try to jeopardize our business, these reviews are nothing but some cheap unethical comments by some of the fake users,” an Emobilize spokesperson told Digital Trends.

Another company, this time from India, called Delwyn (but also operating under the name Gowyn) has allegedly  placed false ads on websites to lure people into calling the firm for help. Delwyn didn’t respond to requests for comment.

According to Malwarebytes researchers, you can piece together when a company is involved in scams by examining their social media posts, descriptions on their websites, complaints made about them on consumer forums, and even Craigslist job posts. “Some of them are really open. They don’t seem to care,” said the researcher.

tech-support-craigslist
Image used with permission by copyright holder

There have also been cases of scammers using third-party software like LogMeIn to carry out their correspondence with victims. LogMeIn explained that it polices its software for tactics like this and reports abuse to the authorities.

“Use of this software or any of our products for nefarious or illegal purposes violates our terms and is immediate grounds for account termination,” said a spokesperson.

Kleczynski added that companies need to take an active role in clamping down on tech support scammers. We’ve already seen Microsoft decide that it’s had enough by filing a lawsuit against alleged culprits.

“We definitely see a larger involvement from the different parties that are affected by tech support scams. Having said that, in the past year we have seen some notable takedowns both in the U.S. and overseas, so things are going in the right direction,” said Kleczynski, who nevertheless conceded that scammers are wily and always evolving to the next trick.

Editors' Recommendations

Jonathan Keane
Former Digital Trends Contributor
Jonathan is a freelance technology journalist living in Dublin, Ireland. He's previously written for publications and sites…
The best web browsers for 2024
Lenovo IdeaPad 530S

All web browsers have the same basic function, and yet, the choice between them has always been one of the most contentious in tech history. You have more options these days than ever before, whether you're looking for the best web browser for privacy, the best for speed, or perhaps something a bit more adventurous.

To help you decide on the best web browser, we grabbed the latest browsers and put them through their paces. Even if some could use a complete overhaul, these options are your best chance for a great online experience.
The best web browser: Google Chrome
Google Chrome version 116 Mark Coppock / Digital Trends
Chrome is ubiquitous -- and for good reason. With a robust feature set, full Google Account integration, a thriving extension ecosystem (available through the Chrome Web Store), and a reliable suite of mobile apps, it’s easy to see why Chrome is the most popular and the best web browser.
Chrome boasts some of the most extensive mobile integration available. Served up on every major platform, keeping data in sync is easy, making browsing between multiple devices a breeze. Sign in to your Google account on one device, and all Chrome bookmarks, saved data, and preferences come right along. Even active extensions stay synchronized across devices.
Chrome's Password Manager can automatically generate and recommend strong passwords when a user creates a new account on a webpage. Managing saved passwords and adding notes to passwords is even easier. The search bar, or Omnibox, provides "rich results" comprised of useful answers, and it now supports generative AI capabilities. Favorites are more accessible as well, and they're manageable on the New Tab page. And it's now easier to mute tabs to avoid unwanted sounds.

Read more
Squarespace free trial: Build and host your website for free
Squarespace Fluid Engine screenshot.

With so many folks running their own websites these days, you may be considering getting one for yourself, and it's actually surprisingly easy to build a website without a ton of effort. Even better, Squarespace is one of the biggest and most well-known website builders out there, and even offers things like domain hosting and Squarespace courses, which is pretty interesting. Of course, it is quite a financial investment, even if you take advantage of one of these Squarespace deals, so you'll be happy to know that there's a great free trial to test out if Squarespace is the service for you.
Is there a Squarespace free trial?

Yup, there's a Squarespace free trial. You don't even need a credit card to start out with one of the best website builders -- Squarespace -- so there's absolutely no risk. All you need to do is pick out a template that works for your needs and go from there.

Read more
The next big Windows 11 update has a new hardware requirement
Windows 11 device sitting on a stool.

Microsoft’s upcoming Windows 11 24H2 update is expected to arrive with yet another hardware requirement. Centered around SSE4.2 or Streaming SIMD Extensions 4.2, a crucial component for modern processors, the new Windows 11 24H2 with build 26080 will only boot on CPUs that support the instruction set.

This information comes from Bob Pony on X (previously known as Twitter), following earlier reports in February where he claimed that CPUs lacking support for the POPCNT instruction were no longer compatible with Windows 11. The updated requirement is essentially the same, except that they now mandate the entire SSE 4.2 instruction set instead of just the POPCNT instruction within it, as was previously required.

Read more