Here’s what you must do in case you fall victim to such a scheme

Aug 25, 2012 10:26 GMT  ·  By

The owners of Ammyy Admin are warning customers to be on the lookout for phone calls from alleged tech support companies that want to rely on their software to defraud users.

On numerous occasions we noticed that tech support scams involve a remote desktop software called Ammyy Admin. The cybercriminals have been using it to gain access to their victims’ computers.

As we mentioned previously, Ammyy Admin is a perfectly legitimate software, but crooks have started utilizing it to complete their malicious missions.

“Unfortunately, there are some cases of malicious use of our software noticed. Please be attentive and never grant access to people you don't know personally or whom you don't trust,” the warning issued by the company reads.

It continues, “If you receive a phone call claiming to be from 'Microsoft' or someone claiming to work on their behalf, telling you that you have a virus on your computer or some errors which they will help you to fix via Ammyy Admin, it is definitely a scam.

“There also might be phone calls from people presenting themselves as internet service provider technicians or any other tech support specialists. We can assure you Ammyy Inc. doesn't make these kinds of calls and never asks to download and launch Ammyy Admin.”

Ammyy also offers some great tips for those who already got scammed. First of all, victims must terminate their Internet connection, turn off their PC, call their financial institution, and ask them to freeze their accounts.

This is needed because the crooks usually rely on the software to obtain online banking information which they can use to transfer money to their own accounts.

The fraudsters might also install malware, which is why victims are recommended to run a complete system scan to ensure that no threats are present.

Finally, the attackers might have set Ammyy Admin to run in automatic mode. This allows them to access the computer at any time. To prevent this from happening, internauts must remove the program from their machines.