Disable Quick Assist Before Fake IT Calls

Your inbox floods, then a fake IT voice asks for Microsoft Quick Assist — that is live remote control aimed at VPN credential theft, not spam cleanup. Telekom Security published September 14, 2026 on the systemchk toolkit: email bombing, phone or Teams impersonation of IT, Quick Assist access, then harvesting of VPN configs across major clients. Sequel to the Sep 22 passkey IT-call refuse video without remaking it — same social pressure, different tool. This CyberSecurity long-form covers campaign mechanics at a high level, how Quick Assist sessions work, Settings and PowerShell uninstall paths from Microsoft Learn, never approving cold remote help, ignore-the-bomb and out-of-band verify rules, and recovery if you already Allowed a session: disconnect, rotate passwords, revoke VPN, audit MFA. Includes a weekend checklist for intermediate home and small-biz users who want disable steps, not fear. Practical, privacy-first guidance from 30-plus years in IT. Passkey IT-call:    • That Passkey IT Call Is a Scam (2026)   WireGuard:    • Setting Up Your Own VPN Server (WireGuard)...   VPN:    • Your Home VPN Can Get You Hacked (2026)