I Made an Antivirus That Secretly Attacks Scammers

[00:00:00]Today, we're creating the first anti-antivirus software. Let me explain.

[00:00:04]Our scammer is going to get a notification from an interesting new antivirus. If he so much as hovers over it, it unleashes a concoction of 12 random viruses. They could be anything from key loggers to crypto miners to fullon ransomware. Results may vary.

[00:00:19]This data could be uploaded to some random server, or they could do so much damage that the system itself can't keep up. All we know is once it starts, they can kiss their scamming days goodbye.

[00:00:29]So, all we need to do now is find the perfect victim.

[00:00:32]>> Thank you for calling customer support.

[00:00:33]How may I help you?

[00:00:34]>> Hi. Is this Microsoft?

[00:00:36]>> Yes, ma'am. This is Microsoft 365.

[00:00:39]>> That is a lie. This is actually a scammer who goes by Rio. He sent us an email with a fake charge and a phone number to bait us into calling so he can try and steal our money.

[00:00:47]>> This is a subscription for anti virus protection plan for your computer and it is provided by Microsoft 365. I don't I I want that cancelled.

[00:00:58]>> Okay, no problem. So, in order to cancel the subscription, you'll need to fill out a cancellation form. Okay, ma'am.

[00:01:04]>> Well, I don't know how to do that.

[00:01:06]>> I will guide you with the call. That's fine.

[00:01:08]>> Okay. Sorry.

[00:01:09]>> All right. No, don't worry about it.

[00:01:11]>> Now, Rio just said a lot of nonsense there, but it's all to give himself a legitimate sounding reason to connect to her computer via remote access software.

[00:01:18]And this is what we're going to use to hack him. So, to protect our tactics, we're going to cut around a little bit.

[00:01:22]But I need to show you a few clips so you can see all this fake technician stuff might be going to Rio's head a little bit.

[00:01:27]>> First of all, I do believe you're not much of a techsavvy person. Correct.

[00:01:31]>> No, I I'm a simple woman.

[00:01:34]>> Oh, okay. Perfect.

[00:01:36]>> I do have an account manager, but he helps me fix my computer sometimes. But >> uh Okay, no problem. Now I am your manager. Okay, >> I'm going to help you with the call.

[00:01:48]>> Right after this, he gets us to install the remote access software. And now he needs our systems ID and password. But check out how he responds to a compliment Perogi's character gives him.

[00:01:56]>> Please tell your partner.

[00:01:57]>> And it will be giving you your ID and a password. Do you see that?

[00:02:01]>> How did you know that?

[00:02:02]>> Because it is my daily work, ma'am.

[00:02:05]>> Okay. Uh >> I like uh I uh help customer every day like uh more than 10 to 15 just like >> So you're like a tech. You're kind of like that Mark Zuckenberg guy.

[00:02:17]>> Yes. Okay.

[00:02:18]>> You can say that. Well, we're going to be putting that to the test here in a second. After some back and forth, we finish the remote access process, and now our systems are linked. But Rio has no idea. He's just made the biggest mistake of his life.

[00:02:29]>> Because you are not a techsavvy person, I have connected you to my robotic server, so it will remove it automatically.

[00:02:36]>> Basically, what he's done is leave the door open on his system. Now, we know how to get in through there. And because of that, we can leave a few gifts that put his computer into our hands.

[00:02:44]Normally, we can do this pretty quietly, but to our surprise, Rio might not be all talk.

[00:02:49]What happened? Did you just get spooked?

[00:02:51]>> Oh, we got him though. We got him.

[00:02:53]>> We got him.

[00:02:53]>> Wait, wait. Let's see if he fully is See if he fully connects. He's there. He's there. Let's see if it fully connect.

[00:02:57]You see, he went up. IT WENT UP.

[00:02:59]>> OH, YES.

[00:03:00]>> THAT'S freaking >> too late for this poor guy.

[00:03:03]>> It's too late. It's too late.

[00:03:05]>> Can't run away. That's in the sauce.

[00:03:06]>> It's too freaking late. You can't run away from us.

[00:03:09]>> The thing is, noticing us is the easy part, but getting us off the system, that's going to be hard. So, let's see how Rio does. He's a He's a big dummy and he's panicking now. He's 100% panicking. Oh, back it out. Back it up.

[00:03:22]>> Erase it. Erase it.

[00:03:23]>> Erase. Oh, location. Oh, turn off your location.

[00:03:28]>> Yeah, it's okay. That's okay. Yeah, you do that, buddy.

[00:03:30]>> Yeah, turn. He's turning off his location.

[00:03:32]>> What if we get this guy's location after he turns it off?

[00:03:35]>> That's amazing. Yeah. Turn off the location access. That's going to help.

[00:03:39]Really going to help. Guy, >> open it. Go scanny poo. Are you recording that? That's really funny. Go do a little skinny poo.

[00:03:45]>> Come on. There's nothing nothing to see here, buddy.

[00:03:48]>> Oh, virus. Uh, turn it on. Yeah, turn on your domain network firewall. Yep. Turn it on. All right. So, he's safe now. He turned his firewall on. It's active. As he's turning on his domain network firewall, we are elevating to administrator privilege.

[00:04:05]>> Oh, more than that.

[00:04:06]>> More than that.

[00:04:07]>> We own his computer more than he owns his computer. Yeah, we we could we own this computer so badly we could sell it on eBay if we wanted to. I'm just going to call back.

[00:04:15]>> Welcome to support. How can I help you?

[00:04:17]>> Hi. Is this Microsoft?

[00:04:18]>> Yes, this is it.

[00:04:20]>> This is it.

[00:04:21]>> Yes.

[00:04:21]>> Okay, cuz you guys have charged me.

[00:04:24]>> Oh, that's kind of the same guy. That has to be the same guy. I was like, is this Microsoft? He goes, >> this is it.

[00:04:32]>> That's so funny, man. Now, Rio ended up running about 20 more scans and enabling every little bit of security he can think of before promptly shutting down, but none of it helped. Now, as we saw, one of the first things he did was disable the location services. So, it's pretty clear he doesn't want his location out there. Too bad.

[00:04:49]>> Oh, yeah. There's a lot of blue here.

[00:04:51]You see this?

[00:04:52]>> Oh, the street view is live.

[00:04:53]>> That is a lit street view. It's pretty pinpoint.

[00:04:58]>> I mean, it's right there. That's why I was laughing because I was just thinking about the accuracy at which these guys are able to be found. It just makes me smile.

[00:05:06]>> That's right. Rio's located in the Raja Ruidas housing complex in Derapur, West Bengal, India. Now, we'll be passing along his info along with some of the recordings of his scams to the Derapur police. But that's just half the job. So now we got to figure out how to take this guy down.

[00:05:19]>> Tonight, this cyber security expert, what did you plan for this gentleman?

[00:05:23]>> He did a bunch of scans with his antivirus and thought he could get rid of us. That was that was the whole thing. We clearly know he's an expert at this point. So, we're going to pick an anti- anti virus.

[00:05:33]>> We should test him.

[00:05:34]>> Instead of it helping, it's just going to make everything worse.

[00:05:37]>> Yes.

[00:05:38]>> On multiple levels. I think I think it'll make things worse.

[00:05:40]>> Yes. It's going to be very bad for him.

[00:05:42]So, not only is it not going to protect his computer, it's actually going to harm the first antiirus to ever harm someone's computer. And I legally can't say anything about any antiviruses out there if I wanted to say any of them harm people's computers. Love I love that we're calling it an anti-antivirus.

[00:05:58]>> Oh yeah, because that's what it's doing.

[00:05:59]>> Which is just a virus.

[00:06:01]>> Yeah.

[00:06:02]>> Yeah, exactly.

[00:06:03]>> But it makes it sound cool.

[00:06:05]>> So good. We created an anti- antivirus.

[00:06:07]>> We did, dude.

[00:06:08]>> So a virus.

[00:06:09]>> Yes, that is correct.

[00:06:10]>> Okay.

[00:06:11]>> The only thing it's going to detect is the stuff we put in there.

[00:06:13]>> Yeah. So it's going to detect ourselves.

[00:06:15]>> Yeah. Exactly.

[00:06:16]>> It's like going to the beach and throwing a bunch of coins in the sand and then getting a metal detector out.

[00:06:20]>> Yep. That's exactly what Yeah, exactly.

[00:06:21]We're finding things, but we put them there anyway.

[00:06:25]Let's just destroy this guy's computer.

[00:06:27]But before we get into the rest of that in the video, I want to thank Anyesk for partnering with Scammer Payback for so many years and sponsoring today's video.

[00:06:34]Now, I've spent a lot of time with Anyes from events like the people's call center or even Defcon. And really from top down, CEO down at Anyesk. All the people there care about helping others.

[00:06:44]And as a tech company, they're actually proactive. They're doing things that are helping to disrupt scam operations every single day. And we've even seen a huge decline in scammers using Anyesk. and it's because they're getting their IPs banned by any desk, they're being exposed on this channel. And even the thought of them using Anyes to try to scam somebody, they might be missing out on a big payday. So, if you're in the IT space and you're looking for remote access software, give Anyesk a try.

[00:07:08]Their stuff is top-notch. They have hundreds of thousands of happy clients, and we even use Anyesk here in the office for various tasks like remoting into each other's PCs. We'll record sessions for videos or even send each other files. So, thank you so much, Inesk, for partnering with us for so many years and for actually taking the fight to scammers every single day.

[00:07:27]>> Here's how this will work. The next time Rio's online, he's going to get a notification from the new antivirus we installed on a system. As soon as he interacts with it, a torrent of malware will be unleashed on his computer. But here's the funny thing. We don't actually know what all is in there. So, we're going to find out what happens together. Now, let's pick up 3 days later when Rio came back online to start scamming again.

[00:07:46]>> We're good to go, baby. I've been chomping at the bit to get this guy. And speaking of bit, he's trying to steal Bitcoin from this victim.

[00:07:54]>> Thank you. I've had a Red Bull today, so my got wings.

[00:07:58]>> Not sponsored. All right, let's get this guy. He's literally sitting there. I saw a little a little move.

[00:08:04]>> Oh my gosh.

[00:08:06]>> His screen is shaking.

[00:08:09]>> He can't do anything about it. This is like freaking my eyes out.

[00:08:13]>> That's the point.

[00:08:14]>> In what way was this going to help him?

[00:08:16]There was one little tiny popup that said threat detected and I couldn't even finish reading it and the computer just I just want to say kaleidoscope.

[00:08:24]>> Kaleidoscope.

[00:08:25]>> His computer right now.

[00:08:28]>> That's what it says. I don't know.

[00:08:29]>> Midscam his computer screen has turned into a kaleidoscope. This hurts my eyes.

[00:08:33]>> That's actually good to hear cuz it hurts his eyes.

[00:08:36]>> Yeah. And it's getting worse. There we go. Unprotected files found. Scan now.

[00:08:41]Suspicious activity. I got to see that for two seconds. And now we're back to kaleidoscope mode. Reason it's doing this, you can barely hear a little bit of sound.

[00:08:50]>> It's dying on the inside.

[00:08:52]>> It's dying.

[00:08:52]>> We weren't kidding when this when we say this puts malware in your computer. This isn't it. Like literally it it it pulls a random sample from malware bazaar and like there's like probably 12 things of ransomware in his startup folder.

[00:09:03]>> Oh, here we go. Unprotected files found.

[00:09:05]So our anti virus found some threats to his computer. Oh, by the way, it looks like fur >> all the layers. Yeah, it looks like a fur coat is on his screen right now.

[00:09:16]Like I just want to rub my hand across it.

[00:09:18]>> Look, it's doing this. It's doing the this the old TV thing. You see it's going top to bottom.

[00:09:23]>> I don't know what to say about this.

[00:09:24]This is crazy.

[00:09:25]>> He did this, by the way. It's a notification where if he hovered over it, he he moved the mouse over it.

[00:09:29]>> He did that.

[00:09:29]>> You may be at risk.

[00:09:31]>> Yeah, you may be at risk. There's plenty of risk this guy's got. And he's just letting this thing run.

[00:09:36]>> I think he got up and ran away. I >> I genuinely think he just ran away.

[00:09:40]>> I don't know what I would do with this.

[00:09:41]just sprints out of his apartment. Oh, he's going to grab a brick.

[00:09:45]>> He just searchs the magic computer.

[00:09:48]>> That's what we recommend you do. Just go out to the street right now and grab one of these and just >> Yeah.

[00:09:56]>> After we break your computer, you should break your computer.

[00:09:59]>> It'll probably be better for you at that point.

[00:10:01]>> Maybe he's like amazed at what's happening to >> I mean, I'm kind of astounded >> and he's like, "Let's see what else is going to happen."

[00:10:07]He's like, "Dang, if this got past my anti virus that I opened 60,000 times, it'd be pretty good."

[00:10:13]>> But just as we thought things were over, Rio comes back to try to make sense of what's happening on his system.

[00:10:18]>> Oh, he's kind of clicking or is that you?

[00:10:20]>> Oh, that's him.

[00:10:21]>> Oh, he's clicking around.

[00:10:22]>> Oh, he's trying to Wait, is he trying to get out? Oh, you see the menu? You can see the menu.

[00:10:26]>> He's trying his best. Oh, okay.

[00:10:28]>> We got a flashlight.

[00:10:28]>> He went to the menu.

[00:10:30]>> Oh, >> go to the menu, guy.

[00:10:32]>> Starting to get >> Oh my gosh. Detected threats. So, he opened up our anti virus quarantine.

[00:10:39]It's hurting my eyes so badly. It's making me dizzy.

[00:10:42]>> It's so much movement going on.

[00:10:44]>> Oh, there we go. System scan. That's beautiful. He's on the dashboard now.

[00:10:47]He's seeing all the viruses, everything that's running. And it's all critical, by the way. Everything is critical.

[00:10:54]>> I want to make this point. There's some malware that maybe wants to steal your banking credentials, maybe log your keyboard, maybe hold your files ransom.

[00:11:02]Whatever mix of all of this, whatever you did to him, Knight, I've never seen a reaction, an allergic reaction that this like what concoction of all of this did this, dude.

[00:11:15]>> It's not It's not a good It's not a good combo.

[00:11:17]>> This is unbelievable. And he's just sitting here letting it happen.

[00:11:20]>> I think he did a good job with this one.

[00:11:22]>> He's letting it all happen. It's still going. He's just sitting here trying to click and make sense of this.

[00:11:27]>> This has got to be the most virus virus.

[00:11:29]>> Yeah. You see what I'm saying?

[00:11:30]>> What do you think of virus? What do you think of that? You think of this?

[00:11:34]>> Like if a computer could actually have symptoms of a virus, this is what it would look like.

[00:11:39]>> Is he trying to hit stop scan?

[00:11:40]>> I think he's trying.

[00:11:41]>> He's trying to stop the scan.

[00:11:43]>> You just want to learn about all the stuff that's on.

[00:11:45]>> You're so far past this.

[00:11:46]>> I know. Exactly. Look Look how much he has to go to. It's It's going to run for 3 hours. By the way, >> it's going to go for 3 hours.

[00:11:51]>> The funny part is we don't even know what malware is in there.

[00:11:53]>> He's in quite the conundrum now. Okay.

[00:11:55]He's got an anti virus running on his computer that is doing the anti of an anti virus. He's got a tornado siren glaring through his speakers. And every time he tries to stop or quarantine any of these files, it gets worse.

[00:12:09]>> The situation, it's safe to say, is not going to get any better for the scammer.

[00:12:12]No matter what he does, if he shuts down, if he restarts, if he comes back online, the best thing he can do is brick his computer, not use it anymore, and not scam anybody ever again. This is Prago scammer payback.

[00:12:25]Wow, that's ridiculous saying don't get scammed. That is ridiculous.