It is a scam that we often talk about in our articles or find in the various topics of our forums devoted to spyware and other viruses on the Internet. But this time, a step has been taken by the scammers who have simply decided to use paid advertising on the Bing search engine to engage customers and specifically target individuals or professionals seeking access to Taxes’ site. To do this, they use an ad titled “Access your space – Home – Taxes”, with an ad titled: Trustslime.com Excellent application for monitoring your budget. Expense manager, money budget planner. The purpose of the latter is to redirect you to a page where you will find a multitude of windows and a shrill sound: Windows Defender – Security Warning Contact Technical Support: 09-70-18-02-20. The statements to arm yourself against it or to shut it down…
Beware of the tax site scam on Bing
We often have a habit of saying that today’s viruses are no longer the viruses we saw in the 2000s, between ransomware, fake connection pages to your bank or your CAF account to recover your data, the world of hackers is evolved considerably in recent years. And this new fake tech support scam from Microsoft shows us once again that the imagination of hackers is limitless.
This time they decided to take a step and go straight through the advertiser box. On the home page of the Bing search engine, typing the query “Government Taxes” will give you a classic results page. Except that the first result, which is a paid advertisement, is in fact the starting point of the scam called “Access your space – Home – Taxes trustslime.com Excellent application for monitoring your budget. Expense manager, money budget planner.
Once clicked on the assumption that it is the legitimate site “Impots.gouv.fr”, after several URL redirects you will find yourself on a page with a shrill sound informing you (recording of our screen) that your operating system has been blocked.
An example of a tax scam message that may appear as a popup
Windows Defender – Security Warning
Threat Detected: Trojan Spyware
Windows has been blocked due to questionable activity.
Contact Technical Support: 09-70-18-02-20
The tax scam message that may also appear as a second popup
Windows Defender – Security Warning
** Windows has been blocked due to questionable activity **
Call us within the next 5 minutes to prevent your computer from shutting down. The following data has been stolen.
> Facebook login
> Credit card details
> Login to email account
> Photos stored on this PC
You should contact us immediately so that our technicians can guide you through the removal process over the phone. Call us within the next 5 minutes to avoid a complete failure of your computer.
Contact the Windows Helpline to reactivate your computer.
Closing this page will disable access to your computer to prevent further damage to our network.
Call us for free on: 09-70-18-02-20
There’s also a scan of your firewall waiting behind you just to scare you, and in the background is the image of Microsoft’s support website on the web. Finally, you are also entitled to the message: Windows has been blocked due to questionable activity at the bottom of the page, you never know, if you didn’t understand the message.
The Purpose of the Microsoft Tech Support Scam
For starters, you should know that this kind of scam is not new, the Microsoft technical assistance scam is already several months or even several years old, except that in recent days it has a tendency to spread on the internet, causing us to sound the alarm. and above everything makes it clear that the targeted internet users were the ones who had to declare their taxes online.
The goal, of course, is to take remote control of your system to scare you even more with all the error messages that will appear in the event viewer. Then, when you have become addicted, the scammer will rush you to ask you to pay a significant amount (150 to 250 € or more) to completely clean your system, to sell you an antivirus program. At best you will end up with missing programs, at worst an unstable system that needs to be reinstalled or requires a full system restore. When they are not guests installed without your knowledge.
How to Close Windows Fake Alert Permanently
If the message appears in full screen as we have seen during our tests, i.e. you no longer have the possibility to see the taskbar, press the keys “Alt + F4” to close your browser is cmd + Q on Mac, otherwise just press the “Windows” button on your keyboard to reopen the bar and start menu. Then right click on it and select “Task Manager”.
Note that you can also do this with the “Alt + Ctrl + Del” key combination. Then in the “Processes”, select your browser (Google Chrome / Edge / Firefox) and click “End Task” at the bottom of the window. In the worst case scenario, hold your finger on the start button on your PC for a few seconds, which will disable it, although it’s not recommended, Windows and your hard drive don’t like being shut down like this. way.
Even if nothing has been downloaded to your operating system, if you wish, you can scan it with antispyware such as Malwarebyte or Awdcleaner and be especially careful the next time you search for information. Keep in mind that a top position is not a sign of quality, let alone an ad like this.
And don’t forget to double-read whatever appears on your screen, be it an email, a web page or anything else, because it doesn’t just happen to others. This will allow us to avoid repetition every time the problem is between the seat and the screen.
You can find people discussing this topic in the forums of the site: “Threat Detected – Trojan Spyware App: Ads.financetrack(1).exe contact 09-70-18-32-42”