This is part 3 of “Locating the Tech Support Scammers”. I was able to find out how the scammers channeled money from the UK back to India.

Link to Part 1 of this video: https://www.youtube.com/watch?v=PKhD7pF59WE
Link to Part 2 of this video: https://www.youtube.com/watch?v=jllY-8oBsso

Link to AnnaKate’s Music Channel: https://www.youtube.com/channel/UCgxr11jt6nwacUjx0Mnf-Ig (Thank you AK)

If you would like to support me on Patreon, here’s the link:
https://www.patreon.com/user?u=3115485

And my twitter feed: https://twitter.com/JimBrowning11

I got access to the merchant account of tech scammers WetechConsultants.com (Quatrro BPO) and their profits are staggering. I found out just how many victims they ripped off and why they’re keen to keep their scams going.

The link to ScorpioNick’s refund (same scammers, different continent): https://www.youtube.com/watch?v=oGTlgwvFHCM

You’ll find me on the Discord server – Scammer Sublounge: https://discord.me/scammersublounge

My Twitter feed: https://twitter.com/JimBrowning11 (@JimBrowning11)

If you’d like to sponsor me, this is my Patreon link: https://www.patreon.com/user?u=3115485

Who are these scammers? Well, their IP address was 125.63.71.228 on 16/11/2016 and I had one scammer admit that he was employed by quatrro.com. Their address is 19, Udyog Vihar, Phase I, Gurugram, Haryana 122016, India
Phone: +91 124 456 1000

For more insight into other scammers, check out ‘Nightmare on Scam Street’s’ most recent video: https://www.youtube.com/watch?v=VzKUxODNa3c

My music credits: http://freemusicarchive.org/music/boxcat_games/

This is a tutorial, so no scambaiting here this time. If you want to avoid scammers picking up that you’re baiting them with a Virtual Machine, this is how to make it really stealthy.

You’ll need the following Registry Point:
HKEY_LOCAL_MACHINESYSTEMControlSet001Enum

Search for the following 4 GUIDs:

{4d36e967-e325-11ce-bfc1-08002be10318}
{4d36e968-e325-11ce-bfc1-08002be10318}
{4d36e965-e325-11ce-bfc1-08002be10318}
{4d36e96f-e325-11ce-bfc1-08002be10318}

You can download the VMware Tools stealthy registry files from :

http://s000.tinyupload.com/?file_id=28189572125883244400 (v14+)
OR
https://mega.nz/#F!PlMihRxR!09SdR7r09qSsWFk37HAyXQ (v8-v13)

This will work for Windows 7, 8, 8.1 and 10 with VMware tools 10.10

I’ll do a VBOX/WIn7 version soon.

Happy scambaiting!

A scammer accidentally gave me access to his PC. I found out quite a few things about this scammer and his victims. Enjoy.

If you’d like to sponsor me, this is my Patreon link: https://www.patreon.com/JimBrowning

My twitter handle is @JimBrowning11

What the scammer had downloaded:
His Dialling software: http://www.goautodial.com/
The scammer’s recent song: http://pagalworld.me/filedownload/5657/39851/Tune%20Jo%20Na%20Kaha%20-%20www.Pagalworld.com.html

My music credits: http://freemusicarchive.org/music/boxcat_games/

I discovered that scammers are not very smart when it comes to covering their tracks. Their fake software had their names all over it…

If you would like to support me (entirely optional), this is my Patreon Link: https://www.patreon.com/user?u=3115485

To download the fake software, try: hxxps://safeapzz.com/websvc/sdt/exe/happy/SDT_Happy.exe
[Disclaimer: Download and use this software at your own risk]
Username and password: 2200001526

If this goes down, you can access this software here:
https://mega.nz/#F!N40hVZZS!pLXfDKuAAeACxlGnMuXBWg

Also have a look at these webservices:
http://www.safeapzz.com/websvc/wsbenosoft/activate.asmx [Safe]

SparksGen’s company registration: https://beta.companieshouse.gov.uk/company/SC482418

Benovellient Technologies Pvt Ltd address (Beno Support):
B-23/C1, Sector – 62 Institutional Area Noida, U.P 201307 India

Music credits: http://freemusicarchive.org/music/boxcat_games/

A scammer is about to call me…He said he will call me back. Apparently I have a Windows Licensing issue..

I mentioned scammer sublounge: https://discord.gg/ssl