ALERT:
Dell Tech Support Service Tag Hack
A number of people using Dell PCs have been contacted by scammers claiming to be Dell Tech Support who had PC-specific data that only Dell could have had.
Every Dell PC sold has a unique service tag number, which the CyberCriminals have gotten somehow.
Dell posted a warning in October about this phone scam, but did not mention a service tag number hack. Dell apparently does not know what is going on, and is “investigating”.
The scam goes something like this…
People are receiving phone calls reporting to be from “Dell Tech Support”. They have all the correct personal information, including your name, contact numbers, emails, and address, including the computer-specific service tag number, and any ‘ticket’ numbers assigned to any phone calls you made to Dell support, including the issue that the phone calls were about.
They try to manipulate people into downloading software onto their computer that will give the fake “support” access to their computer. They will not “fix” anything, but you will receive a huge credit card invoice, and may have ransomware infecting your computer.
Ars Technica reports several stories indicating a possible security breach.
- Joseph B. called Dell about a problem with his optical drive. A few months later, he received a call from a CyberCriminal who knew exactly what his problem was (optical drive), his service tag number, computer model and serial number, and other customer-specific information.
- Patrick Z. reported on a Dell U.S.A Customer Care Board about receiving similar calls. He stated the CyberCriminals knew his full name, email address, city, phone number, computer service tag, and a real Dell ticket number. He called the scammers back at the number they provided, and they answered “Dell Software Support”. Patrick Z. hung up & called Dell support directly [using a publicly available phone number, such as on the Dell website]. When he asked company reps to explain how CyberCriminals had so much information about him, a company employee answered “Dell is aware of this and other complaints and is investigating. No, there will not be a public post/blog. We consider this closed from a Forum perspective.”
- DJ, an unhappy customer posted in June 2015 that [other than a hack], there is no other way the person would have had my name, cell phone number, and know I had a Dell computer if it didn’t come from your company…”
In a 10ZenMunkeys’ blog post published Jan. 4/16, the author reported he had been contacted by CyberCriminals who knew of every problem the author had ever called Dell about. None of the problems had ever been discussed in public forums, leading the author to share the suspicion that proprietary Dell data had somehow been breached. The author reports that the CyberCriminals instructed to enter their domain name into the author’s “Run window”, which would have re-directed to a site to download software to allow remote access to their computer.
There are several other Dell customer complaints regarding the same type of scenarios.
If you receive a phone call reporting to be tech support (from ANY company), and they request you to confirm personal/payment information, or to grant them access to your computer —
HANG UP…IMMEDIATELY.
Delete any email they might send you with similar claims.
ONLY give out personal information, if you have initiated the call, and looked up the main company number yourself on the company’s main website.
Do NOT rely on information in pop-ups, ads, in general internet searches, or on another website or forum, unless you can verify it is a valid source and verify it is a valid phone number for that company.
Not sure if your company is safe? Ask us for a FREE Network Security Assessment!
Check out our “Email Red Flags” for what to watch for in suspicious emails.
Top 5 Reasons to Invest in CyberSecurity
immediate payout, but also includes downtime, loss of data, PR damage, loss of business/revenue, damage to equipment, as well as legal fees and implications. 
Small- to -medium-sized businesses that have been hacked may feel like it was a ‘fluke’. The reality is that CyberAttackers use both automated software that probes websites for vulnerabilities and flaws that are easily breached, and thoroughly tested, massive phishing campaigns to spread botnets, Trojans and ransomware. 
continues, countries are investing billions of dollars in their CyberWar attack capabilites. CyberCriminals go after whole sectors of the economy – that means degrading organizations, running stock markets, financials, insurance, manufacturing and more.
1. Black Friday/Cyber Monday
retailers or social media posts that offer phony vouchers or gift cards (eg. Starbucks) paired with special promotions or contests. Some posts or emails may even appear to be shared by a friend (who may have been hacked). Develop a healthy dose of skepticism this holiday…at least in relation to online scams.
shipping, and shipping scams. You will likely see emails supposedly from Canada Post, UPS or FedEx in your inbox that claim there’s a problem with your package and/or it could not be delivered. Many of these are phishing attacks that try to make you click on a link or open an attachment. If you click, your computer will be infected with a virus, or even ransomware which holds all your files hostage until you pay $500 in ransom.
think that hasn’t escaped the notice of CyberCriminals. Emails reportedly from retail chains or e-commerce companies such as Amazon or eBay have been received, claiming there’s a “wrong transaction” and prompt you to click the refund link. However, when you do that and are asked to fill out a form, the personal information you give out will be sold to CyberCriminals who use it against you. 
that tricks people into thinking they could win movie tickets to the highly-anticipated movie, “Star Wars: The Force Awakens,” due out December 18. However, the email is a phishing attack. Leading up to the film’s release, and shortly after, you need to stay alert for this social engineering attack. 
Bonus Tips:
