Palo Alto Networks Unit 42’s Post

We've observed a surge in #TechSupportScam activity, with the usual web.core[.]windows[.]net URLs & some new domains registered for these #scam sites. We saw an average of 30 daily hits in Aug 2024 rise to an average of 300 daily by November. More info at https://bit.ly/3VmYvOO

  • Line graph displaying the trend of tech support scam incidents over time, with data points ranging from August 8, 2024 to November 15, 2024, showing fluctuations and peaks in scam incidents. The highest peaks are in October and November.
  • Screenshot displaying multiple Microsoft Windows Defender error dialogues in different languages including French, Japanese, and German. Some of the information is redacted.
  • Red text and arrow point to browser URL: Phone number not required in URL to display page. Screen displaying multiple pop-up windows with security warning messages indicating a computer security concern. One window labeled "Windows Defender Security Center" prompts user to call a support number for access to critical Windows security support. Other visible elements include a digital clock, a web page, and a background desktop image featuring a city skyline at night.
Dawid Golak

Senior Offensive Security Engineer | Creating Innovative Red Teaming Techniques | Passionate Educator in Cybersecurity

4d

From 30 to 300 daily hits in just a few months? The rapid rise in hasztag#TechSupportScam activity highlights how threat actors adapt and scale their operations. It's a stark reminder to stay vigilant, double down on user awareness, and monitor those domains like a hawk. How are your teams countering these evolving tactics?

Like
Reply

To view or add a comment, sign in

Explore topics