fake facebook wheel prize

[ParanoiaBoy]

hi everybody, today my mom was using browsing chrome on her smartphone looking for a cake recipe.

she called me because she got a screen with a fake facebook wheel that was saying "congratulations", click to win a prize, or kind of.

she forgot how she made it to happen :-|   

i didn't click anything and i tried to avoid it by closing the chrome window and deleting browser history.

i scanned the device with Malwarebytes mobile Premium and it didn't find anything, looks clean. WHY?

i was sure she got a virus or kind of, why nothing is showing from scans and nothing was blocked? what was that wheel?

thank you

[pondus]

Don’t take this Lucky Wheel for a Spin…

https://blog.malwarebytes.com/cybercrime/2015/07/dont-take-this-lucky-wheel-for-a-spin/

 

[ParanoiaBoy]

52 minutes ago, pondus said:

Don’t take this Lucky Wheel for a Spin…

https://blog.malwarebytes.com/cybercrime/2015/07/dont-take-this-lucky-wheel-for-a-spin/

 

thanks for this!! 

but why mbam mobile didn't block/find anything?

[pondus]

URL was not on MBAMs block list .... these fake popups have a short life and then they move to another URL

Lots of info online

https://www.google.no/search?q=fake+facebook+wheel+prize&rlz=1C1JZAP_noNO713NO713&oq=fake+facebook+wheel+prize&aqs=chrome..69i57j69i60l2.519j0j7&sourceid=chrome&{google:instantExtendedEnabledParameter}ie=UTF-8

 

 

[ParanoiaBoy]

so what should i do?... @pondus

Edited April 16, 2018 by ParanoiaBoy

[ParanoiaBoy]

hi @florinch! thank you very much for your help!

sadly i don't have any info anymore about that ip since my mom forgot where she went to and i had to delete browser history.

i just ran a lot of scans and nothing found, neither blocked the time when she visited it, i really don't know if i'm infected or not..

i changed passwords, just in case

anything left i can do?

[mbam_mtbr]

Hi @ParanoiaBoy,

These types of ads are browser related. This is caused by the way most browsers handle redirections executed by javascript code.  Most browsers don't do a great job of preventing these redirects, which also cause ad pop-ups.  Advertising affiliates are aware of this, and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

The best way to block these pop-ups are to try a different browsers, disable javascript, install a browser with ad blocking (like Opera), and/or install Ad-block Plus.

If you encounter these pop-ups again, back out of them using Android's back key. Also, clearing your history and cache will help stop the ads from reoccurring — which I've seen you already done.

Thanks for reaching out,
Nathan
 

[ParanoiaBoy]

hello, sorry if i'm "necroposting" this, but it happened again and i really need your precious help!

this time it happened on my computer (not on android), when i tried to go to a website that i thought it was safe ( which i didn't visit since a long time). 

a fake lottery prize pop-up happened. i immediately closed the website, but i don't understand why mbam block didn't show up. is it for the same reasons you wrote above on this topic?

(browser: chrome, kaspersky + mbam, mbam extension on)

the url is in the attached image (just google metagame.it to see it by yourself )

are my passwords and all at risk?

@mbam_mtbr 

 

[mbam_mtbr]

Hi @ParanoiaBoy,

The main purpose of these pop-ups are to gather information like email address.  As long as you didn't enter any info you are fine.  It appears the site has already been removed.

Nathan