Page 1 of 2 1 2 LastLast
Results 1 to 10 of 11
    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #1

    Browser Hijacker

    One of your advertisers launches an attack that hijacks the browser. On my phone, a Javascript dialog with Cancel and OK options opens over a page claiming I've won a sweepstakes. The only way out is to close the tab.

    The dialog opens after maybe fifteen minutes of use, irregularly.

    Tracking down these scammers must be challenging.
    Last edited by GoesStation; 21-Aug-2016 at 20:34. Reason: Add information.
    I am not a teacher.

    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #2

    Re: Browser Hijacker

    Here are screenshots of the whole sordid story.

    First this dialog opens:
    Click image for larger version. 

Name:	IMG_20160822_58809.jpg 
Views:	8 
Size:	18.2 KB 
ID:	2421

    When I click OK, I get this page:
    Click image for larger version. 

Name:	IMG_20160822_5924.jpg 
Views:	7 
Size:	33.9 KB 
ID:	2422
    It looks up the ISP from the IP address. When I'm on my home network, it congratulates me as a lucky AT&T customer. When I'm on wireless data around here, I'm a lucky Verizon customer.

    When I try to leave that page, this dialog opens:
    Click image for larger version. 

Name:	IMG_20160822_59180.jpg 
Views:	7 
Size:	26.6 KB 
ID:	2423

    I'm trapped whether or not I check the "prevent additional dialogs" box.
    Last edited by GoesStation; 23-Aug-2016 at 01:12. Reason: To add information.
    I am not a teacher.

  1. Webmaster, UsingEnglish.com
    Interested in Language
    • Member Info
      • Native Language:
      • British English
      • Home Country:
      • England
      • Current Location:
      • England

    • Join Date: Nov 2002
    • Posts: 3,567
    #3

    Re: Browser Hijacker

    The safety of our users always comes first and we try very hard to ensure that this never happens to our users. We work closely with the advertising networks we use to try and ensure things like this never happen. Sadly, as you have experienced, sometimes the odd one slips through the net.

    I will contact our networks and ask them to research what might have happened and to remove the advertiser concerned.

    Sorry you have had these problems! :(
    I'm not a teacher, so please consider any advice I give in that context.

    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #4

    Re: Browser Hijacker

    I've discovered that my browser is infected with the redirect script. I don't know whether it came from one of your advertisers after all.

    A little research revealed that Google Chrome for Android is subject to this kind of attack and, once infected, the script can run from any tab. I haven't found a fix for it yet.
    I am not a teacher.

  2. Webmaster, UsingEnglish.com
    Interested in Language
    • Member Info
      • Native Language:
      • British English
      • Home Country:
      • England
      • Current Location:
      • England

    • Join Date: Nov 2002
    • Posts: 3,567
    #5

    Re: Browser Hijacker

    Hi again,

    Yeah, we have been unable to find out anywhere this might have come from on this site - our advertiser networks have very strict policies on this sort of thing and have lots of tools to detect and remove rogue advertisers.

    If your browser has been hijacked then I'd strongly recommend you use something like https://www.malwarebytes.com/ - just run a scan with that and it will probably detect and be able to remove any issues.

    If you need further help, try http://www.bleepingcomputer.com/foru...-removal-logs/

    Good luck, and let us know how it goes!
    I'm not a teacher, so please consider any advice I give in that context.

    • Member Info
      • Native Language:
      • British English
      • Home Country:
      • UK
      • Current Location:
      • Laos

    • Join Date: Nov 2002
    • Posts: 57,912
    #6

    Re: Browser Hijacker

    Could it be a virus from elsewhere? I once got something that I associated with a site that came from elsewhere. We haven't had any other messages about this.

    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #7

    Re: Browser Hijacker

    This is a malware infection but it doesn't qualify as a virus. A site has loaded a script into my browser. The script wakes up periodically and redirects me to a site that displays the exciting news that I'm a lucky winner and tries to get me to follow a link to another site which will try to sell me something unsavory.

    The last bit is conjecture. This is a very old kind of attack which is totally ineffective on a Windows PC. My research hasn't found a cure for my particular platform but I'll keep looking.
    I am not a teacher.

    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #8

    Re: Browser Hijacker

    Quote Originally Posted by Red5 View Post
    Hi again,

    Yeah, we have been unable to find out anywhere this might have come from on this site - our advertiser networks have very strict policies on this sort of thing and have lots of tools to detect and remove rogue advertisers.

    If your browser has been hijacked then I'd strongly recommend you use something like https://www.malwarebytes.com/ - just run a scan with that and it will probably detect and be able to remove any issues.

    If you need further help, try http://www.bleepingcomputer.com/foru...-removal-logs/

    Good luck, and let us know how it goes!
    Malwarebytes for Android didn't fix the problem. I'll try some other fixes when I get a chance.

    Android browsers are quite different beasts from their PC-based cousins.
    I am not a teacher.

    • Member Info
      • Native Language:
      • British English
      • Home Country:
      • UK
      • Current Location:
      • Laos

    • Join Date: Nov 2002
    • Posts: 57,912
    #9

    Re: Browser Hijacker

    Yours is the only case of this that has been reported to us.

    • Member Info
      • Native Language:
      • American English
      • Home Country:
      • United States
      • Current Location:
      • United States

    • Join Date: Dec 2015
    • Posts: 9,369
    #10

    Re: Browser Hijacker

    I'm now pretty confident that the attack came from somewhere other than this forum. Sorry if I wasted anyone's time looking for it. I blamed a usingenglish.com advertiser because I'd only seen the attack while on this site. Since then, I've discovered that it wasn't specific to this forum.

    For Android Chrome users: on my phone running Android M ("Marshmallow"), Chrome's App Data shows zero data or cache use. I guess it doesn't maintain separate data and cache memory allocations. Therefore it's not possible to clear the browser's data or cache, which would have been my first troubleshooting step. With that unavailable I cleared the phone's cache partition, something that's worth doing from time to time anyway. The problem hasn't reappeared yet but I haven't run the browser very long so I don't know whether I've really solved it.
    I am not a teacher.

Page 1 of 2 1 2 LastLast

Similar Threads

  1. Replies: 1
    Last Post: 05-May-2014, 04:21
  2. Opera web browser support
    By CarloSsS in forum Support Area
    Replies: 2
    Last Post: 10-Nov-2012, 19:35
  3. Glossary Browser
    By Bags in forum Support Area
    Replies: 6
    Last Post: 22-May-2005, 16:02

Bookmarks

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts
  •