I recently responded to a couple of comments on one of my articles for WeLiveSecurity – Support desk scams: CLSID not unique -on the CLSID ploy used by tech support scammers in the hope of persuading victims that the scammer really has some insight into the condition of the victim’s PC. This works (sometimes) because the scammer uses the ASSOC command to display the following identifier stored in the Windows Registry at HKEY_CLASSES_ROOTCLSID:
ZFSendToTarget=CLSID{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
Support Scammers and Self-Justification
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.