Norton Scam!

Archive
1

I am new to the Norton forum, but I thought this information would be of interest to other Norton users. My Norton security ran out last week so I went and bought another annual subscription, from Currys, it was Norton security deluxe for 5 devices. When I proceeded to install it I had no problem with the first one, but when I tried to install it on my 2nd PC that is when I started to have difficulty

I followed the instructions, which said visit norton.com/setup, a norton  web page came up, so I tried to install my 2nd product key on it, but it wouldn`t accept it  then a form came up to fill,in with details of email address, phone number and other details which I did.

A few minutes later I got a phone call to say that it was norton and that I was having difficulty loading my product key and that they could help me install it. I was a bit suspicious and asked how come they were so fast to ring me. He gave me a load of waffle about how they aquired this information, at he bottom of this web page there were 3 boxes with various intructions about allowing a norton technician to gain access to your P C so that they could solve the problem, he said that if he could access my P C he could help me load norton on to it.  I declined  his proposition.

Half an hour later I got another call from a different person who said he was a norton technician, informing me that he had been notified that I was having a problem and that he could help me load my norton product key, I declined his offer although he was very persuasive.

About an hour later I received another call, by this time I was doubting myself about not allowing the technician to help, after all it was the norton web site? I picked up the phone and a guy said that he was a norton manager and had been asked to call me and help me with my difficulty loading my product key, he was well spoken and very persuasive I eventually relented and followed his instructions so that he could access my computer, he was on it for about 25 minutes, so I don`t know what information he has taken from it. I cant access my P C now as they have put up a password box of there own which I don`t know the password to

I realised when it was to late that I had been hacked. I could kick myself now for being so stupid, but I really believed it was the genuine norton site.

I  have cancelled all my bank cards and changed my passwords.

I just hope by posting this information it might help someone in the future,

Has anybody on the forum experienced anything like this before?

 

 

2

It was a real screen, but I believe bjm is correct: I did a web search for norton.com/setup and found a page which looked official, but was obviously unaffiliated with Norton and a scam.

I contacted Norton support and reported this; they also checked my PC for intrusions.

3

I checked the number and found some people have also reported this number as scam since few months ago at http://www.whycall.me/844-777-7886.html. The next screen that appeared after you entered the product key, was it a real next screen, or a pop-up screen?

4

urbando: I re-traced my steps, doing a web search for norton.com/setup and typing this in the address bar

perhaps, urbando doing web search for norton.com/setup found spoofed [nortonsetup-norton.com]

5

Unlikely, but could it be a coincidence, where the scam call happened when you were doing your Norton activity? 

6

bjm

Thanks for the quote from 800Notes, an invaluable site, which I was about to post.

I wonder if this epidemic of the spoofed Norton Support could reflect the new technique referred to in Permalink  here?

7

I put in my product key and then it told me to call this number 1(844) 777-7886 if in the U.S.

https://answers.microsoft.com/en-us/windows/forum/windows_10-security/microsoft-office-365-installation-scam/80527fd7-1582-4060-862d-865fdb806716?auth=1 

They have this number on several fake "software setup" phishing sites. They almost got my dad's credit card info before I warned him and pulled the plug. Why haven't the cops raided these people yet???

https://800notes.com/Phone.aspx/1-844-777-7886

Norton Setup with your product key online. Download & Install Norton Product, Visit activation website http: //www. nortonsetup-norton. com to register your code. More Info Call Now:- US/CA 1-844-777-7886 U.K 44-800-014-8050 AUS 61-1-800-875-269

  • Website

    <p>http: //www. nortonsetup-norton. com</p>
</li>
<li>
<h4>Industry</h4>

<p>Computer Software</p>
</li>
<li>
<h4>Type</h4>

<p>Public Company</p>
</li>
<li>
<h4>Headquarters</h4>

<p><span>Ohio United States</span> <span>Streetsboro,</span> Ohio <span>44241</span> <span>United States</span></p>
</li>
<li>
<h4>Company Size</h4>

<p>Myself Only</p>
</li>

https://www.linkedin.com/company/norton-setup-support

 

8

Norton.com/setup directed me to the page with the phone number of the scammer.

I went to norton.com/setup, as it is printed in the instructions on the Product Key card in the SW set I purchased. On this page there was a field with instructions to enter the Product Key, which I did. Then I got a screen telling me the product key was invalid, or words to that effect and to call 1-844-777-7886. Come to think of it, the guy who answered didn't say "Norton Support" or anything, just hello. And the BS commenced.

Someone is interdicting your /setup page, it appears. Check it out.

I could not replicate these screens this evening; when I tried I got a request to log in to Norton and did so, now that I've registered in order to research this scam. But there is still a problem with your /setup site, it would appear.

How do I make sure my new PC is clean? It's not as if I just clicked on an attachment in an email - this scammer was able to remote in to my computer and mess with all kinds of folders that meant nothing to me. I watched him doing things. It even looked legit, but obviously I'm not a tech. He could have installed any kind of tracker or keystroke recorder. Will Norton find threats like this? 

 

9

 He said he could fix all and install the Norton, but at a cost of $250.

If you are asked for money, it is definitely not genuine Norton. Still not sure how you were redirected to the scam page.

 

10

> Chat with Official Norton Support   --|-- Call Official Norton Support 

11

I re-traced my steps, doing a web search for norton.com/setup and typing this in the address bar, and was prompted to enter my Norton password. Having registered in order to access this forum and inquire about this suspected scam, I proceeded to enter Norton, where I entered my Product Key. It appeared to take - I had the option to "start download" which I did not do.

How can I be certain that my Norton Security Deluxe is not some malware foisted upon me by the "tech" who I was prompted to call? I don't recall exactly what the page looked like several days ago, but I was not prompted to register with Norton, generate a password, etc. - I just typed in the Product Key and the next screen said something like "Product Key invalid, call --- ---- -----", which connected me to the assumed scamtech.

Again, how could this happen, Norton?

12
urbando: Norton Scam!  I experienced an almost identical scenario this week. Purchased a new PC online and Norton Security Deluxe at the same time. I followed the package instructions to go to norton.com/setup and type in my product key.

FWIW ~ norton.com/setup resolves to https://my.norton.com/home/setup

13

Norton Scam!

I experienced an almost identical scenario this week. Purchased a new PC online and Norton Security Deluxe at the same time. I followed the package instructions to go to norton.com/setup and type in my product key. It did not take, and I was prompted to call a number. A tech answered and asked if he could remote in to troubleshoot. I was skeptical, but as this phone number was from the Norton setup page I said okay. How did he manage to remote in when I'm not on a network? I have no idea. He said I needed a firewall; he showed me various non-working entries, maybe registry entries. He said he could fix all and install the Norton, but at a cost of $250. 

Now I'm really skeptical and said I'll just return the computer to the vendor. He countered with "nothing's wrong with your PC, you just need a firewall for protection". I finally relented and he worked for about 60 minutes. It looked like he was doing fixes and using Norton SW, but I'm no tech and could not tell. Finally he took me to a page to do a bank transfer; something called GlobalByte Cleveland. Now I'm convinced I was scammed but don't know how this happened by going to norton.com/setup to download the SW I paid for.

I ran Power Eraser and found nothing. I have no idea if backdoors, keyloggers, or other invisible malware is now resident on my new PC. I registered for this forum to see if I can get confirmation of the scam and some assurance or scrub that will convince me that my PC has not been hopelessly compromised.

How did this happen, Norton?

14

If you can, hang tight to see if the support manager contacts you. If you do not hear by tonight, post back and we can look further into this.

 

15

I am somewhat of a novice when it comes to computer jargon. I really don`t know what that means.

16

Hopefully the customer service manager can contact you before you have to do that.

Have you tried booting to Safe Mode?

 

17

Yes I went through the same procedure when I installed it on the first P C. When I first installed it on my first P C it was fine ,but it is now showing on both P Cs issue found. I have resolved the issue on the first P C but cam`t gain access to the other P C as they have left a box that requires a password, which I don`t know. So I think I will have to take my P C to a technician for repair.

18

Without seeing what url you actually ended up on, we cannot really say.   

I can confirm that the link you mention,  norton.com/setup is a legitimate Norton site. It is hard to determine if the pop up you saw was a legitimate or malicious pop up. 

Did you use the same process when you installed on the first PC?

As noted above, I have escalated your issue. If it was genuine Norton, there should be a record of the contact that can be tracked.

 

 

19

I question whether it was  a genuine norton site, or whether I have been redirected to a sham site, running alongside the genuine norton site.

20

I have asked a customer service manager to look into this. 

It does sound like some scam. But the question is how did it happen while you are on a genuine Norton site?