Using a VPN? Don't get phished by a pop-up scam saying your subscription has expired!

12/12/2020, 6:35 AM CST | Patriot777

[Patriot777]

Dear fellow FReepers, likely the majority of you use a VPN along with more secure browsers and also add-ons like Ghostery.

Every time my computer boots up, the first thing that I see is my VPN asking to secure. Then I click on the secure tab and it logs on and secures my internet browsing.

But yesterday morning a very official-looking notification (a pop-up) appeared with the exact same logo as my VPN, informing me that my subscription had expired and that I needed to purchase a new plan. It also said that my current subscription would expire in January 2021, likely the 1st.

Now, I wasn't quite awake yet (MAJOR DRAWBACK), and didn't immediately contact my VPN provider to find out if this was from them or from a spoofer / phishing--like I should have done.

So the groggy me clicked on the tab that said purchase new plan, also appearing very offical-looking with all the aspects of bringing you to the website where you would select which monthly or yearly plan you would like. And the site looked EXACTLY LIKE the official website to choose your plan, the payment procedure(s), and a receipt. And then of course the (official-looking) download and / or updates for the new subscription.

I clicked on the download button, and instead of seeing its progress at the bottom of my screen, the .exe file went straight to downloads and did not open as it usually did and then ask if I would allow this file to make changes to my computer. I sought it out in my Files, found it, and clicked on it. And yes, it told me to seek opening the file using a list of browsers, and then I found out that nothing would open it.

I HAD BEEN PHISHED.

Immediately I opened a chat with my VPN, and the tech speedily went to work looking up my account and then looking into what had taken place. He then informed me that it was indeed not them, but a phishing site that had gotten me. So I went down to my bank and talked with the card services representative, and she dutifully straightened the whole thing out---cancelling the card information and number, issuing me a new card with all new numbers, name, etc. The transaction was still pending, so I am to make sure to check and see if it does go through, I am to again contact card services and they will go to work on it and retrieve the funds.

The bank I use, and have been a member of since the 80s, is by-far the best bank in my area and is very powerful. They stand by their members and do everything to help them, and I know by personal experience they definitely do.

So my beloved fellow FReepers, don't get had, don't get phished, don't get robbed of your money. CHECK WITH YOU VPN FIRST, and don't click on anything that pops up on your screen. Stay safe, love you all and the Lord Jesus richly bless your weekend.

**If you would like information on the exact VPN and other information, please PM me**

[proxy_user]

Nearly every financial and subscription service, including the IRS and Social Security, has a web site where you can log in a check the status of your account. In almost every case, you’ll find that the email or phone call you received doesn’t correspond to the actual status of your account.

[rlmorel]

Thanks for the heads up...glad you picked it up!

[Patriot777]

that is true, proxy_user

[School of Rational Thought]

Secret VPN service

[rktman]

They are some sneaky MOFOs.

[Sgt_Schultze]

For several years, I have been using a service from a site called privacy.com. By using this service, I create credit card numbers on the fly. They can be persistent cards or burner cards. I can set the maximum charge per incidence, per month, per year or total, or no limit. Privacy.com draws directly from my checking account. I setup a separate checking account for this card which only funds these “homemade” cards.

I use these for all subscription services. When I stopped Comcast, I “paused” the card so no further charges would be authorized. No “accidental” charges, no dings for anything, no need to have to beg for my own money back.

Once you assign a card to a merchant, THAT number will ONLY work at THAT merchant. When you need a card number to activate a service that promises to bill you later, you can create one and set the value to $1. Then if you decide to cancel, no accidental charges.

[Patriot777]

Thanks so much for the great information, Sgt_Schultze! I will definitely go to that site and set things up pronto!
God Bless you my friend!

[Patriot777]

I’m not understanding the prices; I would like the best one, but don’t understand the 2,9 USD. Do they mean $29.00 / month or ?

[Twotone]

I had something different happen last week. I subscribe to The Blaze & I got an email saying that my subscription had been cancelled as requested. I didn’t request any such thing. I contacted The Blaze, but so far have not received an answer. My logins are all still good. Very odd...

[Pollard]

Dear fellow FReepers, likely the majority of you use a VPN along with more secure browsers and also add-ons like Ghostery.

um, no

But yesterday morning a very official-looking notification (a pop-up) appeared

You must be using Windows

[Patriot777]

What would be a good alternative from using Windows with a PC?

[Tacrolimus1mg]

I use TorGuard. They don’t pop up messages; that message comes up right within the program window itself.

[Pollard]

I’ve been running various flavors of Ubuntu for 15 years. Right now it’s Kubuntu but I’ve also used Lubuntu, Xubuntu, Linux Mint and a few others. We use PIA, Private Internet Access for a VPN and they have a version for Linux/Ubuntu.

The majority of web servers run Linux so it’s pretty secure to start with but the bigger thing is that Windows is just a target. When hackers and scammers write their viruses, malware, phishing schemes, they do so with Windows in mind because that’s what most people are using.

Analogy; Mechanics here in the rural place I live won’t touch oddball makes of cars. Hard to find someone to work on a Subaru or Lincoln but they all know how to work on a Chevy, Dodge or Ford pickup truck which account for half of all vehicles out here.

Hackers learn to hack Windows. They may also learn to hack/attack a website but they usually attack the software running on the server, ie WordPress, not the actual Linux web server OS.

[glorgau]

The general rule for all of that stuff is “never use a link some popup or email gives you”. Navigate to it yourself.

[Cats1]

Might be a good idea to virus check your computer and then run malwarebytes on it. —Hopefully that will take care of your problem.

p.s. And thanks for the post. I’ve been doing research lately on how to make sure computers are safe.

[conservatism_IS_compassion]

SM, been meaning to ask about Norton360 - germane to this discussion because it includes a VPN - and wonder if 360 is worse than useless on a Mac.

[Do_Tar]

Thanks for the info.
Privacy.com looks pretty interesting. I’ll definitely check it out when I’m more awake.
One of the major CC companies used to offer a similar service, but I don’t think any does any more.

By the way. I DID NOT click on the link you provided! U+1F600

[Uncle Miltie]

I got one of these approximately one year into my three year pre-paid plan.

[Swordmaker]

Norton on a Mac is MALWARE as far as I am concerned. It causes more problems that benefits.