adashiscloth.xyz malware

[dempy]

A family member brought their Android phone to me showing that Chrome was getting a lot of adashiscloth.xyz notification popups.

One of the guides I followed said to remove adashiscloth.xyz from the Chrome allowed notification list.  I did that.  And that seems to have stopped it.

But what was causing Chrome to get these notification popups?  All of the tabs in Chrome were closed on the device.  Chrome itself was closed on the device.

I installed MalwareBytes for Android on the phone and ran a scan.  The guide I followed suggested this as well.  But it did not find anything.

Is there something else that may be running on the device that MalwareBytes did not catch that would have been causing these notification popups?

[mbam_mtbr]

Hi @dempy,

These types of ads are usually browser related. This is caused by the way browsers handle redirections executed by JavaScript code.  Most browsers do not do a great job of preventing these redirects, which can also cause ad pop-ups.  Unethical advertising affiliates are aware of this and exploit this weakness.  Even if an advertising affiliate is shut down for using this exploit, they just come back with a different affiliate id and are right back at it.

Sounds like you already have it resolved.  We usually suggest clearing your history and cache within the browser to stop the ads from reoccurring.  In addition, clearing the Storage & Cache within the browser’s App Info itself also helps:

 

1. Go to Settings > App Info
2. Go to your browser app icon in App info list (such as Chrome) and click on it
3. Once in your browser’s App info, go to Storage & cache
   1. Click Clear Storage
   2. Click Clear cache

If you're still worried about Adware being on the mobile device, you can always send an Apps Report.

To send an Apps Report with Malwarebytes for Android use the following instructions.

1. Open the Malwarebytes for Android app.
2. Tap the Menu icon.
3. Tap Your apps.
4. Tap three lines icon in upper right corner.
5. Tap Send to support

Choose an email app to send Apps Report.

Your email app will open with the Apps Report included.

At this point, it would be very helpful to mention you are submitting via recommendation from the Malwarebytes forum.  This allows our support staff to know where to direct it.

By sending the Apps Report, you will create a ticket in our support system.

Private Message (PM) me the email used and/or the ticket number assigned.

Nathan

[dempy]

Maybe it's resolved then.

I just thought it odd that even with Chrome swiped closed that the notifications were still coming through.

Removing adashiscloth.xyz from the list of sites to allow notifications from stopped the notifications - but I really thought there would have to be something else that was triggering Chrome to allow those notifications to come through.  Even though the notifications have been stopped, whatever was left to trigger that action hasn't been removed (assuming there is something triggering Chrome).

But a scan with Malwarebytes didn't find anything.

If all of that is normal - then I guess it's case closed.