VUMC Enterprise Cybersecurity has noticed an increase of remote support scams. Recently, several malicious actors have started to use Microsoft Teams to pose as VUMC IT staff.
A remote support scam is when a malicious actor attempts to trick the user into thinking there is a serious virus infection or problem with their computer. Malicious actors may bombard the user with spam emails, and then call to “assist them”. The scammer will request that the user download a program that will allow access to the user’s computer. Once the program is downloaded, the scammer will steal information from the computer as well as install other unwanted software. They will often require or request money to be sent through crypto currency or money transfers before the work is complete.
Remote support scams can happen several different ways:
1. Fake IT Support Calls: A person will receive a phone call from someone claiming to be Microsoft support or tech support.
2. Pop-up Warnings: A suspicious or unrecognized pop-up will appear on the computer screen claiming that there is suspicious activity and list a number to call for a live technician.
3. Microsoft Teams Impersonation: Malicious actors may pose as IT support personnel on Microsoft Teams. They may pretend to help with technical issues but instead lead users to download ransomware.
Before accepting, downloading, or discussing information with someone, always check the identity of the individual reaching out to you. When in doubt, submit a Pegasus ticket or call the VUMC IT Help Desk for assistance with a technical issue or questions regarding a technical issue.
It is important to note that the VUMC IT team and the VUMC Help Desk team will never ask an employee for money. If you believe you are the victim of a remote support scam, please turn off your computer and call the VUMC Help Desk at 615-343-4357 (HELP) for assistance with your computer. If you have fallen victim to a remote support scam and lost money, please reach out to your local police department and your financial institutions.
Resources:
https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scam