Serious Security Issue
I have just become aware that my wife took some very ill-advised actions yesterday.
On Aug. 7 my wife did a Google search on Safari on her MacBook Pro for how to access her gmail account. She clicked on Google Support and then called a number for Google Support. The number she talked to was ***. Her iPhone 13 identified it as a Sterling VA number. The person she spoke to had an Indian accent who asked for her Gmail account password. He said it was weak and it had been compromised and provided her with a new password to use. He then provided a code to allow him to access her computer. He then provided a long list of email actions and he circled in red a group of emails from anonymous and that it was a group and that she had been hacked. He said that her firewall was weak and needed to be replaced with a strong firewall. He then transferred her to a company called Instafixus, ***. They then installed a firewall that would provide 3 years of protection. She paid $899.99 with a credit card. We have a receipt. He asked how many devices and she answered 3 computers, 2 phones and 2 printers. He then downloaded software and I now see 1. LMRexcue.pkg.zip, 2. Support-LogMeInRescue 2 & 3. Support-LogMeInRescue 3 in the Downloads folder. However, I do not now see any suspicious applications in the Applications or Utilities folders and no “LogMeInRescue” entries.
Today, Aug. 8, she went on MapQuest to obtain directions and a window popped up that said something like “Warning, call Apple Support at ***”. She does not remember what transpired during that call. A short time later she received a call from ***(Seattle WA #) from Steve S. who said that a Trojan had taken over and installed a malicious program that was listening to our phones that our network is bugged and not to disclose any information to anyone while talking on the phone. He said he would help me get my money back. He said to not do anything while he was checking on our account. An hour later Steve called and said that it would take 14 to 16 hr. to check everything.
I am seriously concerned and think that I will have to take the MacBook Pro to a Genius Bar to be scanned for malicious software. I don’t believe that my M1 MacMini 2020 13.4.1, our MacBook Air 2017 12.6.3 or our 2- iPhone 13’s need to be scanned. I do believe that we need to monitor our credit status and change a lot of passwords. We are currently using our phones and the other computers (not the MacBook Pro).
I am sorry about the length of my message but did not know which details were important.
[Edited by Moderator]
MacBook Pro 17″, 10.13