Fake Windows Activation is actually a ransomware Trojan

A new type of method is being used by hackers to infect unsecure devices. Hackers have spread infected files on the web, and once those infected files are downloaded and executed, the device user will get a message that the Windows operating system license has expired and that they will need to call the number ‘1-888-303-5121’ to reactive the license.

Your Windows License has Expired, Please get a new one by calling on 1-888-303-5121 from Store Representative

But it is important to know that the message is not actually from Microsoft. If you get the message ‘Your Windows License has Expired, Please get a new one by calling on 1-888-303-5121 from Store Representative’, it is strongly recommended to shut down your computer directly.

The security professionals from Symantec called the number, and this was their experience:

We called the toll-free number for more details and for a cost, but due to time constraints (we were on hold for more than 90 minutes), we were forced to hang up. The on-hold music and message were also convincing, and played random music with an automated voice repeating every so often: “We appreciate your business. All agents are currently busy assisting other callers, and please continue to hold for the next available agent.” After the 30-minute mark, it stated: “We apologize for the extended delay and appreciate your business. Please press any key to schedule a call back.”

Infected

If your device has been infected by the windows activation virus, it is strongly recommended to restart your computer in safe mode, and run an up to date antivirus solution.

Founder of Cyberwarzone.com.