Scammed from inside Norton

Norton was blocking my download of MsWord documents from email on my new computer. I reached out to Norton Support; went into chat; asked the question. Was informed I needed to upgrade my Norton because I had upgraded to Windows 10 and the tech would do that for me. I allowed remote access. I felt safe inside Norton. When all said and done I'd been scammed for $349.00 in a 3-year subscription for the updated Norton 360. Today a "real" tech via the Chat Window assured me after a deep clean of my computer that no malware had been added. My credit card company will get my money back from MicroPCservice. My concern is that Norton tech tells me the two people in the first (scam) chat HAD been techs. He didn't explain more. And he was NOT concerned that this had happened and could happen to others!!! He just assured me my computer is safe. BEWARE!

LRuiz:

BJM - The Norton Global Escalations Team has taken over this matter and are working on it. So, I'm leaving it in their capable hands. I have given them all the info and I think they can follow the key strokes from start to finish...at least I hope they have that capability. There is a "hole" in the Tech Chat procedure which they are attempting to identify and patch. In the meantime, my credit card company has submitted fraud charges on my behalf and returned my money. 

Thanks....we'll remain wondering how .... "it was LEGIT...until it wasn't" -

Thanks again -

BJM - The Norton Global Escalations Team has taken over this matter and are working on it. So, I'm leaving it in their capable hands. I have given them all the info and I think they can follow the key strokes from start to finish...at least I hope they have that capability. There is a "hole" in the Tech Chat procedure which they are attempting to identify and patch. In the meantime, my credit card company has submitted fraud charges on my behalf and returned my money. 

Thanks for caring. 

LRuiz:

Jordan, Why did you send me that link?

You'll need to ask Jordan ... from your posted Chat session >
https://community.norton.com/en/comment/8435571#comment-8435571 

Jordan, Why did you send me that link?

LRuiz:

I will tell you again. I was on My Norton. I clicked the Chat window. How MicroPCservice got to me from there is beyond me! That is why I'm raising this concern. Here's the first chat; 
[...]
10:02 AM Jordan has sent a link: 

https://docs.google.com/forms/d/e/1FAIpQLSfKC715woAGJl5kNhoOIhSUk2eHW4vVmi31Cfb3gGJEJje-vg/viewform

 

 

LRuiz:

Thank you for taking this seriously. I believe NORTON itself has a way of checking how it happened. The ENTIRE time I thought I was with Norton, so of course I did what they said.  In fact when I went back on yesterday to find out what had happened the CHAT WINDOW from the previous conversation was STILL THERE, which is how I copied it quickly and saved it. As I went in to give the tech guy yesterday remote access, I saw and copied the code I'd used during the hacked session before it disappeared. So....I have the script; I have the access code. I have the names of the two technicians...it was LEGIT...until it wasn't. I hope for everybody's safety that Norton finds the security hole. I refuse to believe I'm the only one this has happened to. 

 Yes, sure sounds like .... "it was LEGIT...until it wasn't"...

Thank you again for sharing.  
Thank you again for indulging my comments. 

Thank you for taking this seriously. I believe NORTON itself has a way of checking how it happened. The ENTIRE time I thought I was with Norton, so of course I did what they said.  In fact when I went back on yesterday to find out what had happened the CHAT WINDOW from the previous conversation was STILL THERE, which is how I copied it quickly and saved it. As I went in to give the tech guy yesterday remote access, I saw and copied the code I'd used during the hacked session before it disappeared. So....I have the script; I have the access code. I have the names of the two technicians...it was LEGIT...until it wasn't. I hope for everybody's safety that Norton finds the security hole. I refuse to believe I'm the only one this has happened to. 

I've had numerous official Norton Support Chat sessions and had a few official Norton Support remote access sessions. 
I've not seen as you describe.  
Your posted Chat session transcript does not look familiar.   Where is your part of the Chat session transcript? 
Did you post an edited version of your Chat session transcript.  

Again, I believe you. 

LRuiz:
If I had to fill out that form I did.

You do not recall submitting credit card information?  
I'm trying to imagine how you reached Micro PC Service, an independent provider of on-demand tech support -

Thank you for indulging my curiosity. 

LRuiz:
Micro PC Service scammed me. I was INSIDE MyNorton. I clicked on the chat with a tech window.

Yes, Scary!   
I'm trying to imagine that a fake chat support window was presented to you while you were inside "My Norton" pages.  
I'm trying to imagine that you provided credit card information on the Secure Sign Up Form docs.google.com/forms/ page. 
Scary!

 My credit card company will get my money back from MicroPCservice. My concern is that Norton tech tells me the two people in the first (scam) chat HAD been techs. He didn't explain more. And he was NOT concerned that this had happened and could happen to others!!! He just assured me my computer is safe. BEWARE!

Thank you for sharing.  I hope your credit card company is issuing a new credit card.   

by my google search:
Micro PC Service is not official NortonLifeLock support -
Micro PC Service is an independent provider of on-demand tech support -

Thank you. I don't remember every action. They were in my computer on remote for a long time downloading stuff. If I had to fill out that form I did. I honestly don't remember. The new tech guy tells me my original Norton does work with my Windows 10, so all that happened on that day was unnecessary and I'm appalled and concerned. Then to be told that the people on that chat, moving me from one person to another "were" Norton techs. I could not get the new guy to explain that statement. Were as in currently. or were as in the past. Did they purposely hijack me? Scary. 

LRuiz:

I will tell you again. I was on My Norton. I clicked the Chat window. How MicroPCservice got to me from there is beyond me! That is why I'm raising this concern. Here's the first chat; 

I hear you. 
I believe you.
I've tried to escalate your concerns -   

10:02 AM Jordan has sent a link: 

https://docs.google.com/forms/d/e/1FAIpQLSfKC715woAGJl5kNhoOIhSUk2eHW4vVmi31Cfb3gGJEJje-vg/viewform

Thank you. 
I've seen that page, as I recall, recently mentioned in the Community....  and you filled out *Required and submitted that page?  

I will tell you again. I was on My Norton. I clicked the Chat window. How MicroPCservice got to me from there is beyond me! That is why I'm raising this concern. Here's the first chat; 

9:53 AM Connecting...

9:53 AM Connected. A support representative will be with you shortly.

9:54 AM Support session established with Jordan.

9:54 AM Jordan restarting application as Windows system service

9:54 AM Connecting...

9:54 AM Connected. A support representative will be with you shortly.

9:54 AM Application running as Windows system service

9:54 AM Support session established with Jordan.

9:54 AM You have granted full permission to Jordan. To revoke, click the red X on the toolbar or press Pause/Break on the keyboard.

9:54 AM Remote Control started by Jordan.

9:54 AM Jordan has sent a link: https://login.norton.com/sso/embedded/update

10:02 AM Jordan has sent a link: https://docs.google.com /forms/ d/e/1FAIpQLSfKC715woAGJl5kNhoOIhSUk2eHW4vVmi31Cfb3gGJEJje-vg/viewform

10:04 AM Transferring session to another technician...

10:05 AM Remote Control by Jordan stopped.

10:05 AM Support session established with Janis.

10:05 AM Remote Control started by Janis.

10:23 AM Transferring session to another technician...

10:23 AM Remote Control by Janis stopped.

10:24 AM Support session established with Janis.

10:24 AM Remote Control started by Janis.

10:28 AM Transferring session to another technician...

10:28 AM Remote Control by Janis stopped.

10:28 AM Support session established with Jay.

10:28 AM Remote Control started by Jay.

10:44 AM Memory information requested by and sent to Jay.

10:44 AM Scheduled tasks information requested by and sent to Jay.

10:44 AM Operating System information requested by and sent to Jay.

10:44 AM Disk drive information requested by and sent to Jay.

10:44 AM CPU information requested by and sent to Jay.

10:44 AM Process list requested by and sent to Jay.

 

10:44 AM Jay: DESKTOP-31VGR6V

 

10:58 AM Remote Control by Jay stopped.

12:26 PM Connecting...

12:26 PM This session has expired and can no longer be used. To start a new session this applet must be downloaded again.

*****Somewhere within that chat I was unknowingly hijacked by MicroPCservices TOLD I was being billed for 3 years of Norton and it ended up that was a lie. YOU tell me how it happened.....

 

[Edit: Removed hyperlink to a potentially malicious page to conform with the Participation Guidelines and Terms of Service]

Hi  @LRuiz
Please confirm that you were Sign'd In to your My Norton account and clicked on a Chat window that was presented to you from the My Norton page -
or were you in this "My Norton" window and you clicked Contact Us?
We'll try to escalate your concerns -
I'd like to know how you reached Micro PC Service - from inside "My Norton" -

Micro PC Service scammed me. I was INSIDE MyNorton. I clicked on the chat with a tech window. I asked my question. I received help and am now able to open the docs BUT in the midst of that chat; I purchased supposedly 3 years on Norton - which it turns out is a lie. They charged my cc the money - it had NOTHING to do with renewing my Norton protection. The SCARY part is it all happened INSIDE Norton. I didn't deviate or go anywhere else on my own. I had copied the chat, so I have names of the techs who asked to come in remotely to solve my problem. The names of the two (I'm told today) "were" technicians....So, how did I end up with MicroPCSystems?  I have NO idea. BUT, I am warning the community that this happened! Inside Norton in a chat window.  

Micro PC Service scammed me. I was INSIDE MyNorton. I clicked on the chat with a tech window. I asked my question. I received help and am now able to open the docs BUT in the midst of that chat; I purchased supposedly 3 years on Norton - which it turns out is a lie. They charged my cc the money - it had NOTHING to do with renewing my Norton protection. The SCARY part is it all happened INSIDE Norton. I didn't deviate or go anywhere else on my own. I had copied the chat, so I have names of the techs who asked to come in remotely to solve my problem. The names of the two (I'm told today) "were" technicians....So, how did I end up with MicroPCSystems?  I have NO idea. BUT, I am warning the community that this happened! Inside Norton in a chat window.  

Norton was blocking my download of MsWord documents from email on my new computer. I reached out to Norton Support; went into chat; [...]

Sorry, for your experience.  How did you reach out to Norton Support -

Micro PC Service is not official NortonLifeLock support -
Micro PC Service is an independent provider of on-demand tech support -