Threat Intelligence Directory
Malware

Tech Support Scam — Remote Access Fraud

Attack Trigger

Fake virus warning or browser pop-up directs victim to call a support number and grant remote access

What Attackers Want

$200–$1,500 for fake repairs, plus potential banking credential theft

How This Attack Works

Victims encounter alarming browser pop-ups or receive emails claiming their computer is infected with malware or their Windows license has expired. They are directed to call a toll-free number where a fake technician guides them through installing remote access software. Once connected, the attacker steals banking credentials, installs malware, and charges hundreds for fake "repairs."

Red Flags to Watch For

  • Microsoft, Apple, and Google never send unsolicited virus warnings by email or pop-up
  • Pop-up or email instructs you to call a phone number for technical help
  • Technician asks you to download TeamViewer, AnyDesk, or similar remote access tools
  • You are asked to open your bank account while sharing your screen
  • Payment for repairs is requested via gift cards or prepaid debit cards
  • Technician claims to find hundreds of "viruses" or "errors" in a quick scan

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • windows-support-alert.comMALICIOUS
  • microsoft-virus-help.netMALICIOUS
  • pc-error-detected.comMALICIOUS
  • tech-support-now.netMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free