Android popups in Chrome

[Nyebodnye]

No idea which app they are coming from. I have Malwarebytes Android fully updated and it doesn't detect anything. Tried Play Store Play Protect - nothing.

They appear to be coming from http://codedexchange.com and redirecting to spam.

http://codedexchange.com/script/s2iurl.php?csid=<numbers> like an affiliate ID or something then loads of other gobbledygook.

 

[Porthos]

I know the following is geared to a pc but see if you can adapt to Chrome in Android.

 

[Nyebodnye]

I've tried clearing browser history, going through all Chrome settings, etc. I don't have any plugins and recently (August) factory reset my phone.

I suspect an app but can't find what it is yet, hence requesting that this domain get blocked.

I'm actually an IT professional and used to manually getting rid of viruses so this is really pi$$ing me off.

 

[Porthos]

I have requested that your post be moved to the mobile malware removal section.

I also suggest using Firefox with the ublock origin add-on enabled.

[Nyebodnye]

Why not just block http://codedexchange.com

Direct access to URL gives a 403 which to me says "up to no good"

Edited December 25, 2020 by AdvancedSetup
corrected font issue

[David H. Lipman]

@Nyebodnye

Please reference;  READ ME: Purpose of this forum

Malicious and/or suspicious URLs should be obfuscated by placing them in Code Tags.  This way they are no longer Live Links (not "clickable" links) to protect other members.

 

** Additionally, please don't respond to other members submissions as you are not a member of a more advanced Forum Group such as;  Staff, Experts, Malware Hunters and/or Trusted Advisors.

 

[Nyebodnye]

I think I found the culprit, it's an Android app called "Barcode scanner" which I have now uninstalled. 

[mbam_mtbr]

Hi @Nyebodnye,

We just added detection for a so-called "Barcode scanner" last week:

My guess this was the same culprit for you.

Nathan