Hacker News Reader

Comment by mirimir | Hacker News Reader

I'm guessing that these customers are running Windows. And very likely as delivered by Dell. Might Dell have bundled a service that provides support information to Dell tech support? And might the scammers be exploiting that service, perhaps through an authentication weakness, without any customer data taken directly from Dell?

View on HN

They outsource their tech support to the lowest bidder, mostly in difficult to monitor overseas offices. I'd say the most likely scenario is that underpaid Dell employees are just using their official access to do the scams or pass the information along to outside scammers.

OK, that makes sense.

I'm confident in this being the issue as I've dealt with support on multiple Dell service tags, and the only service tag the scammers know involved having to communicate with a different department than I usually have.

I received the first call after I had a hardware issue with my laptop serviced on site. The service guy was just a random contractor, so when the call happened my immediate thought was "ah, somebody like that dude just vacuumed up all the customer data." Because, you know, big companies are really great at building secure internal software when chasing the cheapest dollar. </s>

One person in the Ars Technica comment thread says they manage a lot of these machines in an enterprise environment, so surely they would be running clean Windows without any extra crapware, ruling out this possibility.

OK, thanks. But what's "crapware" to some may be features to others. Such as the remote-management clown parade.

Reply on news.ycombinator.com