02/27/2025
A client bought a new printer and typed in the URL noted in the instructions. The webpage that appeared belonged to a scammer who talked them into a remote control session. How did this happen?!
Looking in the client’s Chrome browser history from that day, it appears that the URL was typed out with a semicolon, not a colon (red arrow points to this entry at the bottom of the second photo). As this was a malformed URL address, Google searched for it as a term instead. At this point, the client saw “printer-setup home” as a top search result (next line up). Clicking on that search result loaded a page that looked like Canon but was actually IJ.START.Cannon (Canon with two N’s). This page prompted the client to enter their name and phone number. As soon as that form was submitted, the phone rang and an eager ‘Matthew Smith’ at extension 104 with a case ID already prepared, talked the client into going to the Ultraviewer website and handing over remote control of the computer. Notice the rest of the entries in the browser history.
This client had already experienced being a victim of the tech support scam 7 months prior. The client knew that something was up when the scammer started looking through files and reporting virus infections - not installing the new printer, as expected. The client realized what was happening, shutdown the computer, hung up, and then called me. Thankfully the computer was okay and the client disconnected before being asked for a credit card number or other payment information.
Protect yourself by learning more about the tech support scam here: https://antifraudcentre-centreantifraude.ca/scams-fraudes/service-eng.htm
This example shows how even a past victim of this scam can fall for it again. Scammers use devious ploys such as purchasing domains that are spelled nearly the same as legitimate websites, such as Canon support. They make so much money from this scam that they can pay to advertise these bogus websites on Google and funnel unsuspecting users into their call centers.
Don’t give these people your name or phone number. Don’t believe them if they say they are from a reputable company like Canon or Microsoft. Don’t listen to their threats that something bad is going to happen if you don’t allow them to ‘help’ you. NEVER let anyone remote control your computer, tablet, or smartphone. If you get duped and realize what’s happening, shutdown your device and hang up the phone. Never give credit card info to these scammers or sign them into your bank account. I’ve met victims who have lost thousands of dollars with this scam. It’s heartbreaking because it is so preventable.
Another variant of this scam is a webpage that appears with sounds and flashing lights instructing you that you must call the listed phone number to ‘unlock’ your computer. Don’t panic. Shutdown your device - usually by holding the power button down for at least 10 seconds. After you restart your computer and open your web browser, select the option to NOT reload the last session when the computer lost power, as this would load the same webpage again.