TLDR
Full screen popup on Chrome/Edge (often following a malicious web ad) displays a message 'Microsoft Defender: virus detected' with a number 'Support 0800 XX XX XX'. The fake technician has the user install AnyDesk, locks the PC, and...
How it works
Full screen popup on Chrome/Edge (often following a malicious web ad) displays a message 'Microsoft Defender: virus detected' with a number 'Support 0800 XX XX XX'. The fake technician has the user install AnyDesk, locks the PC, and...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1Indicators: 1) Microsoft never displays a phone number; 2) popup locks the browser; 3) request to install a remote access tool; 4) payment in gift cards.
- 2IF YOU ARE A VICTIM: block your bank card, file a police report, run a full antivirus scan, contact ANSSI.
Source
cybermalveillance-gouv-fr
Source reviewed by Mythos Forensic Team
https://www.cybermalveillance.gouv.fr/FAQ
Is Fake IT technician — 'your PC is infected' popup a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
Indicators: 1) Microsoft never displays a phone number; 2) popup locks the browser; 3) request to install a remote access tool; 4) payment in gift cards.; IF YOU ARE A VICTIM: block your bank card, file a police report, run a full antivirus scan, contact ANSSI.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.