Hey guys,
This likely isnt the best place to be doing this but given the fact that financial ramifications could potentially be forthcoming and I don't know the proper sub for this incident- I figured I'd give it a shot.
Our household printer hasn't been working correctly so my mother contacted "HP" over the phone and they promptly suggested that she open up a remote access connection through fastsupport.com, which she did without hesitation.
At the time she was attempting to print out a tax document specifying her donation of a car as a tax write-off and the PDF was on screen when they remote accessed the computer.
I came in the room as a notepad doc was opened by "HP support" listing the steps she needed to take and asking her for our ZIP code when I told her to hang up.
He had apparently opened up a command prompt and showed her "7000+ infections and errors" in our system and he was going to have someone connect to us to fix the "issues."
After she disconnected, I ran a malwarebytes scan to see if he infected the pc during the conversation and it found no issues, so I went to do a system restore and it said the restore failed to restore to an earlier date- which is making me panic a bit.
He wasn't given any personal information over the phone but my main concern is that he could have been recording the remote access feed and he now has the document regarding her car donation including name and address and probably more sensitive information I haven't considered.
Is the document and computer access enough to steal her identify? If it was, how can we get out ahead of this thing before everything goes to shit?
Submitted April 07, 2017 at 03:54PM by Throwaway718151 http://ift.tt/2nn62Q0
