Fake Microsoft Scanner Secretly Sends Victim Banking and Remote Access Data to Telegram
Brief
A new refund scam is using fake Microsoft-branded security scan websites to trick users into removing antivirus software and sharing sensitive information.
The sites, which use names such as SysScan, claim to check whether antivirus software is working correctly. Instead, they display alarming but fabricated warnings and tell visitors that their installed antivirus is causing serious problems.
The pages falsely claim that Windows no longer supports third-party antivirus products and urge users to uninstall them immediately.
This is untrue. Microsoft continues to support third-party antivirus software on Windows. Researchers identified 11 scam sites hosted on the same server.
While the domains use different names, they follow the same pattern: show a fake scan, report severe device problems, collect victim data, and prepare users for a fraudulent refund call.