Scam calls?

[PensacolaMatt]

I am getting calls from people claiming to be "Windows Server" saying my computer is sending out error messages. The all have India dialects and are very rude when I try to tell them I don't trust them or want their product. TThe last # they called from was 707-337-4930.

My question is Are they a scam or are they actually from Windows trying to help me?

[REO51ST · Accepted solution]

@PensacolaMatt

They are trying to SCAM you.

I am Microsoft Certified and I know they do not do that.

I have received that call many times.

My mother receives the same call 3-4 times a year and she does not have a computer in her house.

Next time just hang up on them.

REO

[_Scotty]

I have been receiving calls from (800) 752-0900. I'm pretty sure it is a scam like the one I have received from "Microsoft" in the past. The interesting things about this one is that the phone number is identified as an HP number when I Googled it and it is also answered by an automated system claiming to be HP when I called the number. So, either I'm paranoid and it really is some one from HP calling or my scam radar is working properly despite the fact that this is a pretty sophisticate scam. Anyway, I blocked the number. 

[tomscot2]

I recieved the scam call yesterday (caller ID 800SERVICE).  What was a first was that they had my name and knew about my HP laptop.  Did HP have data breach of the customer records that we have not heard about?

[REO51ST]

@tomscot2

Please start a post here.

https://h30434.www3.hp.com/t5/Forum-Feedback-Suggestions/bd-p/Feedback

Make the subject something like " How do scammers know our name and our HP product???

REO

[mdklassen]

> Please start a post here.

>   https://h30434.www3.hp.com/t5/Forum-Feedback-Suggestions/bd-p/Feedback

When you get to that web-page, read:

  https://h30434.www3.hp.com/t5/Forum-Feedback-Suggestions/How-to-Avoid-Tech-Support-Phone-Scams/td-p/...

which covers your concern.

So, no need to "start a new post".

[REO51ST]

@mdklassen

Please post about something you now about.

It is not about just the scam it is about trying to push the fact that they new his NAME and PRODUCT.

How did they get that info.

There are more and more of these and I would say there has been some kind of breach.

Be it from HP or from the location of purchase.

REO

[mdklassen]

> Please post about something you now [sic] about.

Please do not "shoot the messenger".

> It is not about just the scam it is about trying to push the fact that they new [sic] his NAME and PRODUCT.

Rogue software running on a compromised computer can send that information to the scammer.

A previous "calling from Windows" telephone-call from a scammer, reaching somebody else in the household who has access to the same computer, could have scammed that person into downloading/running a RAT (Remote Administration Tool), to let the scammer extract that information.

It's quite possible that a scammer will "sit" upon the hijacked information for a while.

I have heard about scammers calling at about 12 months after the original (successful) scam, to try to "re-scam" the same victim.

[REO51ST]

Sorry @mdklassen

I am fed up with the fact that these scammers have the name, product numbers and even serial numbers.

Windows scam's are just generic random calls.

The ones attacking HP onwers have everything.

When they call they will have your name, product number and even the serial number.

REO

[mdklassen]

> I am fed up with the fact that these scammers have the name, product numbers and even serial numbers.

Me, too.  The only question is "how did they get the information?"

To briefly repeat:

* a previous call from a scammer,

* malicious software "calls home" to the scammer,

Or, the NBTSTAT command (for computers directly connected to cable/DSL modem, i.e., not connected to a router):

Displays protocol statistics and current TCP/IP connections using NBT
(NetBIOS over TCP/IP).

NBTSTAT [ [-a RemoteName] [-A IP address] [-c] [-n]
        [-r] [-R] [-RR] [-s] [-S] [interval] ]

Yes, "remote IP address" can be specified.

From the unique "MAC-address" that is listed in the output, the first 6 characters (out of the 12) identify the manufacturer of the Ethernet network adapter, e.g., HP or DELL or LENOVO or ...

> Windows scam's [sic] are just generic random calls.

Not always -- you have told us about "targeted" calls.  Are you changing your mind?

> The ones attacking HP onwers [sic] have everything.

> When they call, they will have your name, product number and even the serial number.

The only question is "how did they get the information?"  Do you have an answer?