IOCs for tech support scam activity

Feb 20, 2026 ยท 1 min read

This tech-support scam campaign uses web pages that target Japanese speakers. The pages combine encrypted JavaScript with several browser APIs intended to keep victims trapped in the scam experience.

Observed techniques include full-screen locks, keyboard hijacking, Web Worker resource exhaustion and browser-window re-spawning when a victim attempts to close the page.

Read the full Unit 42 report and indicators โ†’

Tech Support Scams Browser Security Threat Intelligence
He (Shawn) Shuang
Authors
He (Shawn) Shuang
Web Security Researcher