In one week in May 2016, I was shocked to discover that the phone numbers seen on fake malware popups are fronted by many different organisations who seem to take shifts of receiving calls from their victims. This video describes what I uncovered when I lifted the lid on these scam popups.
Popup: http://v5301767898.xyz !!Caution!! You will need to 'End task' your browser if you run this. JavaScript source is here: http://pastebin.com/RAtHP05Q
next-prospects.com aka CompleteTechUS.com aka etech-experts.com aka HelpForSupport.com aka VisionairUS.com
IP: 115.248.232.249 - Chandigarh @ 20:00 on 18/05/16
Actual address: SCO 176, Sec-5, Panchkula 134109, India
TechKnowsHow.co.uk aka VMakSupport.com
IP: 45.113.122.88 @ 20:00 BST on 19/05/2016
Location: A51, Sector 57, Noida, Uttar Pradesh 201301
geak-support.us
IP: Unknown
Location: Unknown, U.S.A
PCFix.org
IP: 50.253.144.180 @ 22:00 BST on 20/05/2016
Location: North Miami Beach
protectandaccess.com aka pctechsupport.co
IP: 59.168.178.117 @ 20:55 BST on 21/05/2016
Location: Unknown, India
vtechies4u.com
IP: 219.65.46.50 @ 19:15 BST on 22/05/2016
Location: Noida, India
Fix-US.com
IP: Unknown
Location: Unknown, India
livepcexpert.com
IP: Unknown
Location: Unknown, India
