They appear to target an area for a while before moving on, claiming to be from microsoft and that you have errors on your computer and that they will fix it. At least one case I know, they put a password lock on the computer to stop the person logging on and then demanded £400. This is an article I wrote on 2010