A person walks into an office, says they are from IT and asks to sit at a computer for a quick fix.Most employees would feel relieved.
Finally, someone came to solve the tech problem.That trust is exactly what one cybercrime group appears to be counting on.The FBI is warning that a group called the Silent Ransom Group is targeting U.S.
businesses, especially law firms, by pretending to be IT support.The group first tries to talk employees into installing remote access software.
When that fails, the scam can move from the phone to the front door.That is where things get especially brazen.According to the FBI, these impostors may show up in person with flash drives, external hard drives and other equipment.
Once they sit at a workstation, they can copy sensitive files, gain more access and leave behind malware.Then they walk away.The company may not hear from them again until the ransom demand arrives.PROTECTING YOURSELF FROM MICROSOFT TECH SUPPORT SCAMSA fake IT support visit can look routine until sensitive files are copied from a company computer.
(Jens Schlueter/Getty Images)Sign up for my FREE CyberGuy ReportThe Silent Ransom Group, also known as Luna Moth, Chatty Spider and UNC3753, uses phone calls, phishing and old-fashioned nerve.The scam often starts with a call.
The person on the phone pretends to be IT support and tries to convince the employee to install remote desktop software.That software gives the attacker access to the computer.If the employee refuses or the plan fails, the attacker may send someone to the office.
That person then poses as tech support.They may say they need to troubleshoot a problem, update a system or check a device.
Once seated at the computer, they insert a USB drive or external hard drive.From there, they can pull off files and quietly increase their access.The FBI says the group uses stolen data to extort victims.
They threaten to sell the files or post them online.They may also call employees or clients to pressure t...