14 DAY TRIAL // Security researchers from Malwarebytes uncovered a new type of criminal business that can be described best as Scamware-as-a-Service, currently offered via inboundpopaps[.]info.
According to a map on the website, the company behind this service is named Inbound Solutions, located in Kolkata (formerly Calcutta).
Through this portal brazenly published on the public Internet, the company is offering its services to entry-level crooks that want to run scamware and tech support operations.
Company offers a broad range of services
Inbound Solutions' services range from building websites with fake virus errors to training call center operators, who need to provide the actual tech support to the scam's victims.
The company is not limited to tech support scams hosted online through malicious websites but also provides a package for targeting the app market as well, but the details on this offering are scarce.
Here is the text from the company's main offering, labeled as "Smart Pack". Warning, the English is horrible, just as is with most tech support scams.
“ Generate your inbound Antivirus, blue screen pop up calls by our valued redirecting portal, blue screen app, antivirus app, driver update software application, youtube downloader application with3rd party PPC networks, not Google /yahoo/bing, we provide you complete application, redirecting portal,2 days product on a ppc network and PPC training for account creation with proper key words, targeted country, link connecting, bid management, etc. ”
Furthermore, the crooks also advertise special software that buyers can bundle with legitimate apps as a side-download (PUP - Potentially Unwanted Software). To aid the buyer's tech support operation, the software can induce PC freezes and show errors asking users to call a phone number. For most services, prices range from $10 to $40, depending on the package.Service allows crooks to outsource the tech in tech support scam
This type of operation greatly lowers the technical skills needed to run tech support operations. Crooks around the world can buy the technical infrastructure for their tech support scam and only focus on training call center operators.
Similar to Raas (Ransomware-as-a-Service) and MaaS (Malware-as-a-Service), this type of criminal offering is bound to attract a crowd, albeit unsophisticated, but determined to profit from gullible users.
In recent weeks, both the US FCC and Indian authorities have come down on companies running tech support scams and call centers, operating both in the US and India.
