Annoying scam pop-ups !

Status
Not open for further replies.
Mar 21, 2015
318
247
notts
Funster No
35,523
MH
A class
Exp
since 2010
Does anyone else keep receiving these Please?
Asda offering £500 or someone offering a new I phone etc etc. (I only have to fill in a time limited questionnaire !!!!)
I am only getting them when on fun.
Many thanks

Antique
 
Jul 13, 2008
3,218
2,359
Funster No
3,275
MH
Low profile
Exp
Since 2007
Yes and on another forum too, using android phone. What device are you using?

Subscribers  do not see these advertisements

 

DBK

LIFE MEMBER
Jan 9, 2013
16,352
38,357
Plympton, Devon
Funster No
24,219
MH
PVC, Murvi Morocco
Exp
2013
I get them too on an Android phone. I even got them almost immediately after doing a factory reset on the phone. :LOL:

I only see it on this site but then I do haunt this site too much. :)
 
Feb 14, 2009
1,169
2,838
Chandlers Ford, Hampshire
Funster No
5,630
MH
Burstner TD700 H L
Exp
Since 2008
Me too ..usually that I have won an I phone...did get the ASDA one last week...I am using an Android tablet and only get it whilst on this site .....all malware programmes don't detect it though.

Subscribers  do not see these advertisements

 
Last edited:

DBK

LIFE MEMBER
Jan 9, 2013
16,352
38,357
Plympton, Devon
Funster No
24,219
MH
PVC, Murvi Morocco
Exp
2013
Me too ..usually that I have won an I phone....i am using an Adroit tablet and only get it whilst on this site .....all malware programmes don't detect it though.
Ditto, AVG and Malwarebytes don't react. It's some sort of redirect thing.
 
OP
Antique
Mar 21, 2015
318
247
notts
Funster No
35,523
MH
A class
Exp
since 2010
I don't feel so lonesome now :(.

Subscribers  do not see these advertisements

 
Jan 19, 2014
6,808
16,895
Derbyshire
Funster No
29,757
MH
Elddis Accordo 105
Exp
since 2014
I used to get it a few months ago quite regularly, then it suddenly stopped, but it did it yesterday when I opened chrome browser. I usually use Opera Browser on Samsung S8
 

movan

LIFE MEMBER
Dec 2, 2009
21,088
112,106
Moving around
Funster No
9,543
MH
Burstner
Exp
since07
I got a message yesterday after clicking on a link saying that my phone had been hacked and under no circumstances delete this message or I would lose all information on this phone. Press OK button.

I pressed the off button and all ix ok. For a technophobe like me it was a bit worrying. :(
 
Jan 19, 2014
4,580
14,057
south shields
Funster No
29,767
MH
Chausson 620 welcoome
Exp
since 1990
Another one getting this on an android device..
Only way I can continue is to close down and start again..
Not a clue how to stop it...
I'l Watch this thread for advice...
And yes only on fun so far...
Andy.

Subscribers  do not see these advertisements

 
Nov 16, 2017
47
82
Worksop
Funster No
51,385
MH
Chausson 711
Exp
28 Months
I opened a thread last week and got the pop up message saying my phone had been hacked, I just ignored it. I'm on Android
 
Jul 13, 2008
3,218
2,359
Funster No
3,275
MH
Low profile
Exp
Since 2007
Attached a screen shot of pages loading while viewing MF. I'm using Google Chrome and was told to delete history cookies etc in all my devices that are logged into my Google account. No popups yet today.
Screenshot_20180121-185554.png

Subscribers  do not see these advertisements

 
Mar 31, 2014
374
455
Stratford-upon-Avon, UK
Funster No
30,780
MH
BUCCANEER CARAVEL
Exp
SINCE 1975
Get scam and rubbish emails everyday.I get pissed of having to either delete them or unsubscribe.Why should I unsubscribe when I didn't subsribe in the first place!!

Subscribers  do not see these advertisements

 

DBK

LIFE MEMBER
Jan 9, 2013
16,352
38,357
Plympton, Devon
Funster No
24,219
MH
PVC, Murvi Morocco
Exp
2013
Attached a screen shot of pages loading while viewing MF. I'm using Google Chrome and was told to delete history cookies etc in all my devices that are logged into my Google account. No popups yet today. View attachment 208261
The advice about deleting cookies in all devices sounds good. This may explain why I had this coming back shortly after a factory reset - which should have cleaned that device but perhaps another device grassed on me, so to speak. :)
 

Gromett

Funster
Feb 27, 2011
11,563
33,301
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
There are two possibilities for this that I can see.
The first is that you have installed some new software recently that has bundled this pup.
Have any of you installed an app or program in the last 14 days? If so can you let me know in this thread. We are trying to see if there are any commonalities other than just being a member of fun.

The second question. Is everyone affected by this on Android?

The other way this may have happened is by an advertiser being exploited. But we need to rule out the pup problem first as this particular malware is usually installed via a pup.

https://www.pcrisk.com/removal-guides/10747-you-are-todays-lucky-visitor-scam

Subscribers  do not see these advertisements

 

Gromett

Funster
Feb 27, 2011
11,563
33,301
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
I am asking about apps because it may have been bundled in an app. For instance have you installed a campsite app, or a POI app or similar. Basically Any app that you have installed recently.
Let us know so we can see if we can find a correlation.

If this is only affecting android it seem more likely to be an app infection than this site being infected.
 
Jan 19, 2014
4,580
14,057
south shields
Funster No
29,767
MH
Chausson 620 welcoome
Exp
since 1990
I'e Just tried clearing the browsing history, cache ,cookies and site data....
As soon as I logged back on to fun and tapped the alert notifications to check them this page loaded
http://secure.kingmonology.info/swp...and=Samsung&volid=aps478&src=b2o&model=Galaxy S8&os=Android&xyz=19210-_rIEzOnZY0Q6.OQanrxc&ckk=n&ld=GB&ip=79.70.130.233&browser=Mobile Samsung Browser&city=Newcastle Upon Tyne&isp=Tiscali UK Limited&camp=f59ebbdd-501d-4795-b25f-d1110ae7d17d&lander=e9f62b72-d762-40c0-9d11-22f2f3589110&dt=y&voluumdata=deprecated&eda=deprecated&cep=aBsDCsg9ir_DP2l6BY40I5iDtlTcGpUHwENwyIfbntVbQjrYEeKs2gLd-usLhDDnhyqpgu6hVs6ViFcD8N7COjq-oh8_jao6wS__DEkPtaeBInLHrpFIPym3EWHAw063qiTq6o61NVUbdVNfvJe9yFVo7YOddRa7vKOvF_uq23LxaT6MUGL4jepk_senI6PwdPlDN2zlcTuh0pbwt4SekOxqxObizCnzMGa0KM5VcV66KEIFvzuMITVma_oFfFaIxh1L3XhWcCdLkBSuiWeyJs3L9olwr7dZoPF7N67LLAM&externalid=kGB25FSP01MTQ01003AR0ULMP00IOAWF0MAN207bc7TU0ECM00IOA00

Getting quite regular now...
Andy
 

Gromett

Funster
Feb 27, 2011
11,563
33,301
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
I'e Just tried clearing the browsing history, cache ,cookies and site data....
As soon as I logged back on to fun and tapped the alert notifications to check them this page loaded
http://secure.kingmonology.info/swp...and=Samsung&volid=aps478&src=b2o&model=Galaxy S8&os=Android&xyz=19210-_rIEzOnZY0Q6.OQanrxc&ckk=n&ld=GB&ip=79.70.130.233&browser=Mobile Samsung Browser&city=Newcastle Upon Tyne&isp=Tiscali UK Limited&camp=f59ebbdd-501d-4795-b25f-d1110ae7d17d&lander=e9f62b72-d762-40c0-9d11-22f2f3589110&dt=y&voluumdata=deprecated&eda=deprecated&cep=aBsDCsg9ir_DP2l6BY40I5iDtlTcGpUHwENwyIfbntVbQjrYEeKs2gLd-usLhDDnhyqpgu6hVs6ViFcD8N7COjq-oh8_jao6wS__DEkPtaeBInLHrpFIPym3EWHAw063qiTq6o61NVUbdVNfvJe9yFVo7YOddRa7vKOvF_uq23LxaT6MUGL4jepk_senI6PwdPlDN2zlcTuh0pbwt4SekOxqxObizCnzMGa0KM5VcV66KEIFvzuMITVma_oFfFaIxh1L3XhWcCdLkBSuiWeyJs3L9olwr7dZoPF7N67LLAM&externalid=kGB25FSP01MTQ01003AR0ULMP00IOAWF0MAN207bc7TU0ECM00IOA00

Getting quite regular now...
Andy

Are you on Android? if so have you installed any apps in the last couple of weeks or so?

Subscribers  do not see these advertisements

 
Jan 19, 2014
4,580
14,057
south shields
Funster No
29,767
MH
Chausson 620 welcoome
Exp
since 1990
Are you on Android? if so have you installed any apps in the last couple of weeks or so?
not as far as I know.. but im not savey with this sort of stuff...
ive just changed device from an s5 to a Samsung s8...
I was getting the problem before I changed anyway and everything on the s5 was transfared to the s8.
thats not to say there have not been aps downloaded automatically but ive not used them
Andy
 

DBK

LIFE MEMBER
Jan 9, 2013
16,352
38,357
Plympton, Devon
Funster No
24,219
MH
PVC, Murvi Morocco
Exp
2013
There are two possibilities for this that I can see.
The first is that you have installed some new software recently that has bundled this pup.
Have any of you installed an app or program in the last 14 days? If so can you let me know in this thread. We are trying to see if there are any commonalities other than just being a member of fun.

The second question. Is everyone affected by this on Android?

The other way this may have happened is by an advertiser being exploited. But we need to rule out the pup problem first as this particular malware is usually installed via a pup.

https://www.pcrisk.com/removal-guides/10747-you-are-todays-lucky-visitor-scam
Mine was effectively a brand new (Android) phone. I did a factory reset then sent it off for repair. They (Sony) said all user data would be removed so they probably did another reset. When the phone was returned the browser hijacking started within 24 hours.

But did I install any new apps? I can't remember, certainly not new ones but I did reinstall some apps but they were things like BBC News which hopefully should be safe.

Subscribers  do not see these advertisements

 
Jul 13, 2008
3,218
2,359
Funster No
3,275
MH
Low profile
Exp
Since 2007
I think the fact it is happening on a few (or many) devices almost rules out the actual device and points to the site. I got another phone last week, factory reset it, logged onto fun and the popups appeared within minutes. I have had similar popups on the xda forum.
 

Gromett

Funster
Feb 27, 2011
11,563
33,301
UK
Funster No
15,452
MH
Self Build
Exp
Since 2005
I can tell you with almost 100% certainty it is not the forum itself that is infected.
The fact that everyone so far who has reported an issue is on android suggests that this 'may' be the vector. The other alternative is adverts.
However, the fact that this is only hitting android users suggests that it could be an android infection.

It doesn't need to be a new App that has been installed, it could be an app that you have had for a while that has just been updated. It doesn't matter if it is a new device if you do a restore as the restore process can re-install the bugged app.

All that said, it could be an advert that is carrying some malware that specifically targets android devices through forums. But that does seem a little specific to me?

The next question I have is, when you get the popup can you still see adverts on the page? If so can you make a mental note of which adverts are being displayed. If after a few popups you see a pattern (same advert) let me know please.

Subscribers  do not see these advertisements

 
Status
Not open for further replies.
Top