GoTo Customer Support Embark: GoTo Admin Training Embark: GoTo User Training Provide Feedback

Attack Description

The Attack: Your employees get approached by another tech support scam, pretending to be someone else​ 

Internal IT support is only one of the reasons why your employees could need remote support. For example, they could require customer service for a personal device, and contact external support. This means that they are susceptible to scams from malicious actors not only impersonating your team, but also other organizations such as Microsoft. There are a few strategies you can take into account here to protect your company devices.  

Example Scenario 

Your employee gets an email from someone claiming to be one of their SaaS vendors, stating that they’ve been locked out of their account and including a link to support.  

They click on this link and contact the “support agent” who is really a malicious actor, and who gives them instructions to start a remote support session. 

They follow the instructions and give the malicious actor full control to their device.