Windows Defender Security Center scam: How to protect your computer from fake pop-ups

In an email we received from Janet D., she shared her recent unsettling experience with a tech support scam. Janet described receiving a pop-up on her computer that froze her system and displayed a message claiming, “Access to this system is blocked for security reasons” from Windows Defender Security Center. The pop-up also included an audio message accompanied by a siren, creating a sense of urgency and panic.

In a state of distress, Janet did what many might do in such a situation – she called the number provided on the screen. The scammer instructed her to press Ctrl + Shift + Esc to unfreeze her computer, but the instructions didn’t end there. The scammer directed her to download software from UltraViewer.net, a legitimate remote access tool often exploited by bad actors.

This incident highlights three red flags to recognize in a tech support scam:

1) Unsolicited pop-ups claiming to be from Microsoft or other security services: Legitimate companies like Microsoft do not issue pop-ups with support numbers or direct users to download remote access software.
2) Urgent audio and visual cues: Scammers use sirens, flashing messages, and warnings of dire consequences to create a sense of urgency and push victims into immediate action.
3) Requests to install remote access software: Scammers often use tools like UltraViewer to gain access to victims’ systems. Downloading such software at the request of an unknown party is a red flag.

If you ever encounter a similar scam, here are steps you should take to protect yourself:

– Don’t engage: Do not call the number provided in the pop-up or follow any on-screen instructions. Look up suspicious phone numbers independently and use Task Manager to close the browser or application displaying the message.
– Assess potential damage: Look for any unfamiliar software installed after the incident, check for unauthorized access to important accounts, and run a comprehensive antivirus scan to detect hidden threats.
– Secure your system: Uninstall any remote access software like UltraViewer, update passwords for critical accounts, and seek professional help if you suspect your computer is still compromised.

In the event that you provided personal information to a scammer, take the following steps:

– Stop all communication with the scammer and report the incident to law enforcement.
– Notify your bank and credit card companies, monitor your accounts for suspicious activity, and consider placing a fraud alert on your credit report.
– Be cautious about future communications from unknown sources and consider using an identity theft protection service for added security.

Janet’s experience serves as a reminder to stay vigilant and cautious when faced with tech support scams. By recognizing red flags, staying calm, and taking necessary steps to secure your system, you can protect yourself from falling victim to clever scams designed to exploit fear and urgency. If you encounter a similar situation, remember to verify the legitimacy of alerts and take proactive measures to safeguard your personal information. Stay informed and stay safe online.