I have two factor authentication on one of my important accounts. Well, so I filled in my (this on Xubuntu 18.04LTS PC Desktop) user name and password. The split second I hit the "log in" button, I got a phone call (the phone company labeling "scam likely") and the text (which is what I normally get for the 2-factor authentication). This weirded me out. I let the call go. They left no message. Ever hear of something like this? And, unless it was the absolute freakiest of coincidences, it has me thinking I have some sort of malware on the computer so I'm running ClamTK.

Well, in the settings I checked everything, and then I came across this (attachment)to say to uncheck a bunch of stuff (without saying why). So anyway the scan of the Filesystem is running and has found 37 threats so far. Will these (and more) be quarantined and no longer a threat to the computer? I've heard about 'false positives.' How will I know if something is real malware? Do I delete whatever is quarantined? IOW what do I do when the scan is done?

Attached Thumbnails

 

Are you sure you were on the real site, and not a phish site set up to look like the real site? If so, then the phone call was probably a coincidence. As for positives from ClamAV, maybe take them with a grain of salt:

https://www.bleepingcomputer.com/for...ive/?p=4090478

3 members found this post helpful.

You might find these kind of website scams are real. Once (like 15 years ago) I caught a scam website in the act. I found that the eBay website looked and felt a little strange. Then I checked the adress bar: "ebat.nl" instead of "ebay.nl" - a simple but effective typo scam. I contacted eBay and they later reported back that the scammers were caught by the police. They were thankful but there was no materialization of that gratitude from eBay - well, they were probably more focused on their own brand security

2 members found this post helpful.

Yep. Thanks. I was on the real site. I'm starting to think that as unlikely as the timing was it was a coincidence. But I'm keeping an eye out for wonkiness.

That's a good reminder. I always get in trouble when I'm in a hurry. (eg. not checking the url carefully like you did.)

I have similar thought as smallpond, too. If you sure you were on real site, I just think that you need to clean your computer up just in case if there are some malware on it. These scammers have been around for years, though. I still read people reporting them on complaint boards like http://whycall.me even until now. The only scary thing about those scammers is the fact that they always upgrade their tricks. We need to always be on extra guard.

1 members found this post helpful.

Social engineering is still alive and well. Humans are easier to hack than machines actually.

2 members found this post helpful.

Thanks Blue. And thanks for passing along that whycall.me site. It looks really good.

Yeah, you have to stay ever vigilant.

1 members found this post helpful.