Fake Microsoft Support URL Hosted On Amazon AWS

We have been made aware of another fake Microsoft support URL, this is hosted on Amazon AWS.

It appears to be infected with JS:Trojan.Cryxos.336 and JS:Trojan.Cryxos.1018

Cryxos trojans display a  notification message saying that the user’s computer or web browser has been ‘blocked’ due to a virus infection, and that their personal details are ‘being stolen’. The user is then directed to call a phone number or website for assistance in the ‘removal process’. This is a version of a ‘call support’ scam.

The web address is http://uk.microsoft.support31.s3-website.eu-west-2.amazonaws.com (Please do NOT visit this website address for reference only)

Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: