A new tech support scam pretending to be from McAfee was discovered last week, which steals debit and credit card data from its victims. Scam starts displaying messages to the user when he opens his browser. The message that appears indicates that the user's subscription to McAfee has now expired, and asks for renewal.
This is not the first time we see such a scam. In the past, there have been identical scams, which displayed a message to the user telling him to renew his McAfee subscription. The link they included was an affiliate link, so when the user was making the purchase, the scammers were getting a commission.
However, this scam is somewhat different. When users click on the "Renew Now" button that appears when they open their browser, it appears once the user has to fill in with his or her details. The information required in the form is name, email, card number, card expiration date, CVC home address, postal code and phone number. When the user completes the data and tries to complete the purchase, the browser connects to a site other than McAfee and stores all of the user's details.
When the save process is complete, the user is moved to a new page, and you are asked to invite a company representative to help with the renewal of the program. During the call, the company technician informs that for some reason the purchase of the product failed, and gives the user instructions on how to purchase McAfee from the original isotope using the dedicated affiliate link.
Thus, scammers not only steal user data to use them later but also give users instructions on how to buy antivirus with their own affiliate link, which ensures them a percentage.
If you have been the victim of such a scam, it is important to inform your bank, and to check your recent suspicious charges frequently.