2017-06-09 - EITEST CAMPAIGN STILL PUSHING TECH SUPPORT SCAMS

ASSOCIATED FILES:

  • 2017-06-09-EITest-tech-support-scam.pcap   (278,231 bytes)
  • 2017-06-09-fake-tech-support-site-US-audio.mp3   (196,608 bytes)
  • 2017-06-09-fake-tech-support-site.txt   (11,240 bytes)

 

NOTES:


Shown above:  Current situation with the EITest campaign.

 

TRAFFIC


Shown above:  Injected script in a page from the compromised website  The highlighted URL leads to a tech support scam page.

 


Shown above:  Traffic filtered in Wireshark.

 


Shown above:  Screenshot of the tech support scam page.

 


Shown above:  Screenshot of the tech support scam page with the notification pop-up.

 

ASSOCIATED DOMIAINS AND URLS:

TECH SUPPORT SCAM PHONE NUMBER:

 

FINAL NOTES

Once again, here are the associated files:

ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

Click here to return to the main page.