Annoying scam pop-ups ! (1 Viewer)

[Antique]

Does anyone else keep receiving these Please?
Asda offering £500 or someone offering a new I phone etc etc. (I only have to fill in a time limited questionnaire !!!!)
I am only getting them when on fun.
Many thanks

Antique

 

[davanne]

No I don’t get them

 

[Boringfrog]

Yes and on another forum too, using android phone. What device are you using?

^{_{Subscribers  do not see these advertisements}}

 

[Antique]

Ta @Boringfrog
Yes, Samsung android phone.
Any ideas ?

 

[DBK]

I get them too on an Android phone. I even got them almost immediately after doing a factory reset on the phone.

I only see it on this site but then I do haunt this site too much.

 

[Vanderek]

Me too ..usually that I have won an I phone...did get the ASDA one last week...I am using an Android tablet and only get it whilst on this site .....all malware programmes don't detect it though.

^{_{Subscribers  do not see these advertisements}}

 

[Clarky]

See, should have bought Apple.

 

[DBK]

Me too ..usually that I have won an I phone....i am using an Adroit tablet and only get it whilst on this site .....all malware programmes don't detect it though.

Ditto, AVG and Malwarebytes don't react. It's some sort of redirect thing.

 

[Antique]

I don't feel so lonesome now .

^{_{Subscribers  do not see these advertisements}}

 

[Richard n Ann]

I used to get it a few months ago quite regularly, then it suddenly stopped, but it did it yesterday when I opened chrome browser. I usually use Opera Browser on Samsung S8

 

[movan]

I got a message yesterday after clicking on a link saying that my phone had been hacked and under no circumstances delete this message or I would lose all information on this phone. Press OK button.

I pressed the off button and all ix ok. For a technophobe like me it was a bit worrying.

 

[andy63]

Another one getting this on an android device..
Only way I can continue is to close down and start again..
Not a clue how to stop it...
I'l Watch this thread for advice...
And yes only on fun so far...
Andy.

^{_{Subscribers  do not see these advertisements}}

 

[Boringfrog]

Could ask @Jim anything at your end?

 

[Glynbo]

I opened a thread last week and got the pop up message saying my phone had been hacked, I just ignored it. I'm on Android

 

[Boringfrog]

Attached a screen shot of pages loading while viewing MF. I'm using Google Chrome and was told to delete history cookies etc in all my devices that are logged into my Google account. No popups yet today.

^{_{Subscribers  do not see these advertisements}}

 

[Shrimp]

I've had a few I check what they are then bin them!

 

[Vanderek]

Yes the web site is rgshark.com / survey etc

 

[robrace]

Get scam and rubbish emails everyday.I get pissed of having to either delete them or unsubscribe.Why should I unsubscribe when I didn't subsribe in the first place!!

^{_{Subscribers  do not see these advertisements}}

 

[petenshirley]

Another thumbs up for the Opera browser, on phone, tablet and pc. Seems to cut down on unsolicited pop ups.

 

[DBK]

Attached a screen shot of pages loading while viewing MF. I'm using Google Chrome and was told to delete history cookies etc in all my devices that are logged into my Google account. No popups yet today.View attachment 208261

The advice about deleting cookies in all devices sounds good. This may explain why I had this coming back shortly after a factory reset - which should have cleaned that device but perhaps another device grassed on me, so to speak.

 

[Gromett]

There are two possibilities for this that I can see.
The first is that you have installed some new software recently that has bundled this pup.
Have any of you installed an app or program in the last 14 days? If so can you let me know in this thread. We are trying to see if there are any commonalities other than just being a member of fun.

The second question. Is everyone affected by this on Android?

The other way this may have happened is by an advertiser being exploited. But we need to rule out the pup problem first as this particular malware is usually installed via a pup.

https://www.pcrisk.com/removal-guides/10747-you-are-todays-lucky-visitor-scam

^{_{Subscribers  do not see these advertisements}}

 

[Gromett]

I am asking about apps because it may have been bundled in an app. For instance have you installed a campsite app, or a POI app or similar. Basically Any app that you have installed recently.
Let us know so we can see if we can find a correlation.

If this is only affecting android it seem more likely to be an app infection than this site being infected.

 

[andy63]

I'e Just tried clearing the browsing history, cache ,cookies and site data....
As soon as I logged back on to fun and tapped the alert notifications to check them this page loaded
http://secure.kingmonology.info/swp...and=Samsung&volid=aps478&src=b2o&model=Galaxy S8&os=Android&xyz=19210-_rIEzOnZY0Q6.OQanrxc&ckk=n&ld=GB&ip=79.70.130.233&browser=Mobile Samsung Browser&city=Newcastle Upon Tyne&isp=Tiscali UK Limited&camp=f59ebbdd-501d-4795-b25f-d1110ae7d17d&lander=e9f62b72-d762-40c0-9d11-22f2f3589110&dt=y&voluumdata=deprecated&eda=deprecated&cep=aBsDCsg9ir_DP2l6BY40I5iDtlTcGpUHwENwyIfbntVbQjrYEeKs2gLd-usLhDDnhyqpgu6hVs6ViFcD8N7COjq-oh8_jao6wS__DEkPtaeBInLHrpFIPym3EWHAw063qiTq6o61NVUbdVNfvJe9yFVo7YOddRa7vKOvF_uq23LxaT6MUGL4jepk_senI6PwdPlDN2zlcTuh0pbwt4SekOxqxObizCnzMGa0KM5VcV66KEIFvzuMITVma_oFfFaIxh1L3XhWcCdLkBSuiWeyJs3L9olwr7dZoPF7N67LLAM&externalid=kGB25FSP01MTQ01003AR0ULMP00IOAWF0MAN207bc7TU0ECM00IOA00

Getting quite regular now...
Andy

 

[Gromett]

I'e Just tried clearing the browsing history, cache ,cookies and site data....
As soon as I logged back on to fun and tapped the alert notifications to check them this page loaded
http://secure.kingmonology.info/swp...and=Samsung&volid=aps478&src=b2o&model=Galaxy S8&os=Android&xyz=19210-_rIEzOnZY0Q6.OQanrxc&ckk=n&ld=GB&ip=79.70.130.233&browser=Mobile Samsung Browser&city=Newcastle Upon Tyne&isp=Tiscali UK Limited&camp=f59ebbdd-501d-4795-b25f-d1110ae7d17d&lander=e9f62b72-d762-40c0-9d11-22f2f3589110&dt=y&voluumdata=deprecated&eda=deprecated&cep=aBsDCsg9ir_DP2l6BY40I5iDtlTcGpUHwENwyIfbntVbQjrYEeKs2gLd-usLhDDnhyqpgu6hVs6ViFcD8N7COjq-oh8_jao6wS__DEkPtaeBInLHrpFIPym3EWHAw063qiTq6o61NVUbdVNfvJe9yFVo7YOddRa7vKOvF_uq23LxaT6MUGL4jepk_senI6PwdPlDN2zlcTuh0pbwt4SekOxqxObizCnzMGa0KM5VcV66KEIFvzuMITVma_oFfFaIxh1L3XhWcCdLkBSuiWeyJs3L9olwr7dZoPF7N67LLAM&externalid=kGB25FSP01MTQ01003AR0ULMP00IOAWF0MAN207bc7TU0ECM00IOA00

Getting quite regular now...
Andy

Are you on Android? if so have you installed any apps in the last couple of weeks or so?

^{_{Subscribers  do not see these advertisements}}

 

[Antique]

Don't think I've downloaded any new apps since becoming aware of this @Gromett

 

[andy63]

Are you on Android? if so have you installed any apps in the last couple of weeks or so?

not as far as I know.. but im not savey with this sort of stuff...
ive just changed device from an s5 to a Samsung s8...
I was getting the problem before I changed anyway and everything on the s5 was transfared to the s8.
thats not to say there have not been aps downloaded automatically but ive not used them
Andy

 

[DBK]

There are two possibilities for this that I can see.
The first is that you have installed some new software recently that has bundled this pup.
Have any of you installed an app or program in the last 14 days? If so can you let me know in this thread. We are trying to see if there are any commonalities other than just being a member of fun.

The second question. Is everyone affected by this on Android?

The other way this may have happened is by an advertiser being exploited. But we need to rule out the pup problem first as this particular malware is usually installed via a pup.

https://www.pcrisk.com/removal-guides/10747-you-are-todays-lucky-visitor-scam

Mine was effectively a brand new (Android) phone. I did a factory reset then sent it off for repair. They (Sony) said all user data would be removed so they probably did another reset. When the phone was returned the browser hijacking started within 24 hours.

But did I install any new apps? I can't remember, certainly not new ones but I did reinstall some apps but they were things like BBC News which hopefully should be safe.

^{_{Subscribers  do not see these advertisements}}

 

[Boringfrog]

I think the fact it is happening on a few (or many) devices almost rules out the actual device and points to the site. I got another phone last week, factory reset it, logged onto fun and the popups appeared within minutes. I have had similar popups on the xda forum.

 

[Boringfrog]

https://forum.xda-developers.com/general/about-xda/xda-pop-to-malware-site-ads-t3395196

 

[Gromett]

I can tell you with almost 100% certainty it is not the forum itself that is infected.
The fact that everyone so far who has reported an issue is on android suggests that this 'may' be the vector. The other alternative is adverts.
However, the fact that this is only hitting android users suggests that it could be an android infection.

It doesn't need to be a new App that has been installed, it could be an app that you have had for a while that has just been updated. It doesn't matter if it is a new device if you do a restore as the restore process can re-install the bugged app.

All that said, it could be an advert that is carrying some malware that specifically targets android devices through forums. But that does seem a little specific to me?

The next question I have is, when you get the popup can you still see adverts on the page? If so can you make a mental note of which adverts are being displayed. If after a few popups you see a pattern (same advert) let me know please.

^{_{Subscribers  do not see these advertisements}}