GoKawiilInfoblox Researchers Gain Access to Help TDS Tech Support Scam Network
Security firm Infoblox published a report detailing Help TDS, a traffic distribution system that has been abused since 2017 to funnel victims into fake Microsoft tech support scams. Researchers gained direct access to the platform's affiliate panel, revealing how scammers use fake security alerts to lure victims into calling bogus support lines staffed by criminals who push remote desktop software onto victims' machines.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings show how legitimate advertising infrastructure can be repurposed for sustained fraud rather than one-off theft, since Infoblox researchers describe the scheme as enabling repeated remote access to victims' systems rather than simple credit card fraud. Access to the affiliate panel could help researchers and platforms identify and disrupt similar TDS-based scam networks going forward.
- Help TDS is a traffic distribution tool abused by cybercriminals since 2017 to redirect victims into scam operations.
- Infoblox researchers obtained direct access to the platform's affiliate panel during their investigation.
- Victims are tricked by fake Microsoft security alerts into calling scammers who install remote desktop tools for ongoing exploitation.
Malwarebytes Premium Security Software — With tech support scams increasingly using legitimate-looking infrastructure like TDS systems to trick users, having real-time malware and scam-site blocking is essential. Malwarebytes Premium actively blocks malicious redirects and fake tech-support pages before they can con you into handing over control of your PC or your wallet.
See Malwarebytes Premium Security Software on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Rob Wright, 2026-10-19
Published there as: “Researchers Infiltrate Microsoft Tech Support Scam Operation”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.