I am an avid user of a reverse phone look up site (not naming any names) where you can look up a recent phone number that has called. One of the numbers involves the infamous "Windows Tech Support" phone scam.
Somebody had posted in the thread, claiming that they were able to form a "two-way connection" of sorts. They said that they allowed the scammer to connect to them in a sandbox OS via RDC, and he was able to gain access to the scammer's PC and see what he was doing while the scammer continued with the script.
I am wondering if this is possible, and how the "victim" could have accomplished that?