Notes

employee id:-ES2584
Location:- 11 Times Sq, New York, NY 10036, USA

welcome to microsoft support this is charlie rodriguez how can I help you ?
do not worry i will help you in every possible way
can you read that alert for me ?

can you tell me what were you doing on your computer when you got this alert.
is it your personal computer or your work computer ?

can you tell me which brands computer you are using right now ? like/dell/lenovo/hp/acer
do you know which version of windows you use like w7 w8 w10 {if microsoft}



allright can i place your call on hold for a moment to check everything for you ?

thank you for your patience
as per the error you described i have checked everything for you and it seems
like there is a breach on your network it means its an attempt of hacking which has taken place
and also it seems that the hacking has taken place within past 48 hours
so can you tell me that has someone used your computer within past 48 hours apart from you ?

allright so i believe you are the only user of this computer correct ?
is your wifi password protected ?

now maybe the hackers are continuosly trying to attack on your identity and devices
so now what i am gonna do is i am gonna guide you with some simple
steps to install our secure server application so i can take you to the secured server
and will run some scans

now i want u to press the windows key along with r
www.ultraviewer.net
give a click on ok or enter
i believe you are on the website now
do you see a green colour button that says download
hit that downlkoad button
you will be able to see ultraviewer setup or open file



so are you comfortable to do that ?

{if cx says no then } rebuttal - sir if you wont download that application then i wont be able to
take you on secured server and if we run that scans
without a secure server then hacker would come to know that you came to know about the hacking
so they can do any wrong things with your identity and devices

now i want u to press the windows key along with r
www.ultraviewer.net
give a click on ok or enter
i believe you are on the website now
do you see a green colour button that says download
hit that downlkoad button
you will be able to see ultraviewer setup or open file

guide to download ULTRAVIEWER

what is that ultraviewer
{its a third party sowftware to connect you to the secured server and then we can detect issues
and solve them very soon }

STEPS TO INSTALL ULTRAVIEWER
click on download button and then you will see an option of ULTRAVIEWER SETUP or OPEN FILE
click on that and then please click yes/next/next/next/install/finish
now you will be able to see YOUR ID and PASSWORD
help me out with that ID and that PASSWORD

to

allright now we are successfully connected to the secured server
now we need to run some scans on your computer
{guide him to open CMD}
FIRST SCAN
NETSTAT {this scan will tell us how many hackers are connected to your network}

(u will able to see any users & a blinking bar) yes it means u r scaning has completed
i want u to scroll up the page
now do you see active connections over there
what do you see below active connection ?
I belive
they are trying to get access of u r computer
PROTO - Proto is a network provider the network you use on your devices

LOCAL ADDRESS - These are the IP addresses that belong to your devices

FORIEN ADDRESS - these are the ip address of that hackers we detect on your network at this moment

STATE - what do you see in the state coloum? Established means those hackers are currently connected
to your network
they are trying to get access of u r computer

Now we need to run the second scan that will be
NETSTAT - A {this scan is about the devices that can be used by the hackers to record your
calls or to listen them }
state if you see listening over ther it means those hackers were able to listen your conversation
that you were having using your phone lines it means your phone lines are not secured

now before i go ahead and check everything for you i want you to answer my few questions but only is
yes or no bcoz as you know that your phone lines are not secured yet so any information could be tempered

Do you use any of your devices in your home to use social media platform?

Do you do online shopping using your devices?

Do you play games online?

Do you pay your bills online?

Do you do online banking on your devices?

allright thank you so much for the information
now what i am gonna do is i am gonna connect you from a secured line so no one will be able to listen our
conversation

dont worry u r computer is on secured network

{CONNECT CX FROM OUTBOUND}

perfect now we are connected from a secured phone line now no one is able to listen our conversation

now we are gonna run third and the final scan on your computer
cd..
cd..
dir/s

{PASTE THIS ON CX COMMAND PROMPT}

FINAL REPORT

MICROSOFT SECURITY SCAN COMPLETED

ILLEGAL VISIT ON PORN WEBSITE WWW.PORNHUB.NET [SOURCE CHINA]

CLAMPI VIRUS DECTECTED

CHILD PORONOGRAPHY DOWNLOADED

FINANCIAL INFORMATION USED ON WWW.PORNHUB.NET

ILLEGAL PURCHASES WITH CARDS USED STARTING AT 5***,3***,6***,4***

ACCESS ON DARK WEB

PHONE LINES AND NETWORKS ARE HACKED

CONTACT BANK FROM A MICROSOFT SECURED LINE AND ASK 48 HOURS HIGH SECURITIES

END OF THE REPORT

{OPTIONAL} In this mordern world hacking is a common issue many peoples face this kind of problems and
we get a lot of calls regarding this issue everyday. US govt has formed a team to stop hacking but
still hacking is a huge network US govt is trying their level best to stop hacking it will be stopped
very soon and most of the hackers belongs from naigeria and china

Allright sir now as i can see that an illegal visit was made using your identity to go on the
website having the address of www.pornhub.netat 4.40 am this morning so was it you who visited this website?
cx says no
Are you sure about it ?

allright as i can see its an paid porn subscription so it is mandatory to put the financial information
to login there so it could be any of your family member who might have your financial data ?

allright if itz not you then it confirms that this are the hackers who have done this and hackers attack
on two things first is your identity and second is your financial data so thats our recommendation
if you check two things only on this protected computer which is under a secured server
cx asks are you able to see my screen?
no sir do not worry no one is able to see or control your computer

so now first of all i want you to check your email and if you find any email with no subject or which
seems fishy to you do let me know allright?
(click the picture)

okay now as i can see that some credit and debit cards were used on that website so can you
please confirm that do you have any cards starting with the number 5,3,6,4 (note down )

now i want you to check your online banking as well and if you find any suspicious transaction
even of 1$ or few cents do let me know
(make sure cx should check in this pc and click the pictures of the balance and the transactions)

allright but still according to us your data is under threat so thats our recommendation if you check
the same thing with your bank as well but make sure that you should be on a secured line because as you
know that you each and every device are hacked so if you will call from your phone hackers will be able
to listen your conversation and if they come to know that you are talking with your bank reguarding this
they they will get access in your account right away

so now i can connect you with your bank and you have to tell them to put high securities for next 48 hours
on your bank account and while i am connecting you with your bank i will be disconnected automatically
because we are not allowed to listen your personal conversation that you are having with your bank.
and once you are done with your bank you can tell them to connect back to us
they will connect you to me allright...

TRANSFERED