The Pop-Up of Doom
You're browsing the web when suddenly, your screen locks up. A loud alarm sounds, and a flashing red box appears: "Windows Defender Security Center. Your computer is infected with a Trojan. Do not turn off your computer. Call Microsoft Support immediately at 1-800-XXX-XXXX."
This is not a virus. It is just a webpage designed to look like a system alert, using JavaScript to prevent you from closing the tab easily.
The Scam Script
- The Scare: You call the number out of panic.
- The Fake Diagnosis: The "technician" asks to connect to your computer using legitimate remote access software (like AnyDesk or TeamViewer). Once connected, they open command prompt, run a meaningless command like
tree, and point to normal system files claiming they are "hackers stealing your banking info." - The Pitch: They offer to "fix" the problem and install a "firewall" for $300-$500.
- The Extortion: Sometimes they go further. They might lock you out of your own computer if you refuse to pay, or use the remote connection to secretly access your online bank accounts while you aren't looking.
The Absolute Truth
Microsoft, Apple, Google, and your ISP will never put a phone number in an error message, and they will never cold-call you to say your computer is infected.
How to Escape the Pop-Up
Do not call the number. Do not click anything on the page.
- Windows: Press
Ctrl + Shift + Escto open Task Manager. Find your browser (Chrome, Edge, etc.) in the list, click it, and select "End Task". - Mac: Press
Command + Option + Esc. Select Safari or Chrome, and click "Force Quit".
When you reopen the browser, do not click "Restore Pages" if prompted.