An integrated threat protection solution designed to detect, investigate, and respond to cyber threats across Microsoft 365 services.
This behavior matches a tech support scam that uses fake security pop‑ups and recordings to scare users into calling a phone number.
Next steps for the MacBook (Airbook):
- Do not call that number again or answer calls from it
- Treat any further calls, texts, or emails from that “support” as malicious.
- Power the Mac back on and close the malicious page
- If the browser reopens with the same page, immediately close the tab or the entire browser.
- If it appears “full screen” and locked, use the browser’s close controls or force‑quit the browser from macOS.
- This type of scam typically only affects the browser session and does not mean the device itself is hacked, especially if no remote‑access software was installed and no passwords or payment details were given.
- Clear browser data
- Open the browser used when the pop‑up appeared.
- Clear history, cookies, and cached files so the malicious page does not reload from history.
- Run security checks and updates
- Ensure all security updates are applied for the operating system and browser.
- If Microsoft 365 or Defender for your organization is in use, follow your school district’s IT guidance for running scans or checks.
- Inform the school district IT department
- Because the device is used for work for a school district, report the incident to the district’s IT or security team.
- They may want to verify the device, check for any unusual activity, and ensure compliance with district security policies.
- Watch for further scam attempts
- Be cautious of future pop‑ups or emails claiming urgent problems with the device or accounts.
- Microsoft and other legitimate tech companies do not display support phone numbers in error messages and do not cold‑call to report problems unless contact was initiated first.
If at any point remote access was granted, software was installed at the scammer’s direction, or personal/financial information was shared, additional steps such as uninstalling any such software, running full malware scans, changing passwords, and contacting financial institutions would be required.
References:
- Protect yourself from tech support scams
- Protect yourself from online scams and attacks
- What to do if a tech support scammer already has your info
- Keep your computer secure at work
- Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
- Who do I call for support? - Microsoft Q&A
- possible virus, computer locked - Microsoft Q&A
- Disabled computer - Microsoft Q&A
- Windows defender scam - Microsoft Q&A
- What's new in Windows Security
- How to spot a "fake order" scam