Browser Hijack Spam - Advice for avoiding it is in the OP

[Chief]

I got this a couple of times yesterday as well.

Be careful guys. This isn't necessarily malware on your device but more likely an exploit run through the ad provider. In doing a bit of reasearch this has affected other forums and websites in the past and a few claim that they're seeing it on their Apple devices within the last couple of years. Over time exploits may be patched on certain OS or browsers and it looks like over the years they've been knocked on the head before finding another way through.

Chief - the site you posted gives me a bad feeling as well - 'howtoremove.guide' looks like a typical scareware page designed to get people to download their 'spyhunter' software. Chances are this could be malware disguised as antivirus, or software designed to create false virus alerts, prompting users to pay to 'fix' them. A look at some reviews around the internet seem to think so as well.

It's the link my ad agent gave me. See the end of the page for manual options.

I have never seen it on my phone. My ad people haven't seen it. I was told that this is malware or a browser exploit of some kind.

If I can get URLs and the like, I can pass them on to be investigated.

 

[Hubnester]

Done a bit more research, looks like this has been an ongoing issue for AdSense. Been hit a number of times over the years and apparently had a huge issue in 2015 that lasted weeks before being fixed. Still plenty of old forum posts and queries from this issue popping up over the years and looks like it's entirely possible for bad ads to sneak through with redirects still.

2015: AdSense Abused with Malvertising Campaign (this link details the exploit, how the redirect works and Google's response)
2015:
2019: AdSense Constantly Redirecting Mobile Users to Spam Websites - Google AdSense Community

I also found this forum, which uses AdSense and also has users reporting the same thing from this week:

https://forum.lowyat.net/topic/5262007

Might be helpful; it also contains image examples, URLs and an admin that has been able to report several exploited ads to try and remove them.
One user reported they noticed the redirect would happen whenever they saw a blank white box where it looked like an ad failed to load which is interesting.

Hopefully some useful tidbits in amongst that.

 

[Chief]

Yep we've seen rogue ads over the years.

 

[hoopsicle]

Just started tonight. Teltra and stenovic ads on each page. Url only shows luckypapa/

 

[jonathons11]

Got it for me for the first time just then.
Took me here if it helps:

http://luckypapa.top/bonus/com-au-ipx-s10-p-new-cdn/lp3.php?c=42z8uxkxz3yz0&k=06cac783c869f8d04027117868eee72c&country_code=AU&carrier=-&country_name=Australia&region=South%20Australia&city=Melrose%20Park&isp=ZETTAGRID%20CLOUD&lang=en&ref_domain=www.bigfooty.com&os=Android&osv=12.&browser=Chrome&browserv=103&brand=unknown&model=unknown&marketing_name=Pixel%205&tablet=2&rheight=0&rwidth=0&t1=2369-2a85eebaf409d32-746&t2=bigfooty.com&t3=gothamads&t4=159.196.19.0&t5=&t6=&t7=&t8=AU&t9=PINMTY1NzQ1MjczMTkzOA&t10=103&t11=bigfooty.com_d64e94af24d3&t12=43257634be747cac3a03d253ed515a43&t13=2||bigfooty.com||bigfooty.com&t14=el&t15=&et1=&et2=&et3=&et4=&et5=&e=5

 

[DragoDelph]

iPhone/safari

 

[Chief]

iPhone/safari

View attachment 1444322View attachment 1444323

If you can get the URL and email it to support@bigfooty.con that would be great.

 

[Tectonic]

Chief your ad providers giving some annoying popups on my phone, pretty sure it's not my device but often browsing a thread I get redirected to a scam site

Only happening on bigfooty shrug

 

[blackshadow]

I had one of those too over the weekend on my mobile. Android using Chrome as a browser.

Normally I use Tapatalk but occasionally there to check something I use the mobile browser.

 

[Swallow_Wood]

Chief your ad providers giving some annoying popups on my phone, pretty sure it's not my device but often browsing a thread I get redirected to a scam site

Only happening on bigfooty shrug

View attachment 1444767

I had one of those too over the weekend on my mobile. Android using Chrome as a browser.

Normally I use Tapatalk but occasionally there to check something I use the mobile browser.

Same.

Android using Duck

 

[Ligma]

Apple>

 

[Chief]

Thanks everyone - we are getting this looked at. I can't recreate it. People have sent me URLs which are a good start.

 

[ubiquitous226]

Has become excessive as of this morning, will email the latest url.

 

[Sinjin Smith]

I've had it 8 times this morning (android).

 

[Orange Agent]

Yep it's going crazy

http://2022325luckyday.top/prize/luckyus-ad/lpphone.php?c=5ezb5az4lz2&k=b6f0ac6f481df4814afa011db7c0edb6&country_code=AU&country_name=Australia&region=New%20South%20Wales&city=Sydney&isp=Microplex%20PTY%20LTD&lang=en&ref_domain=&os=Android&osv=10.&browser=Chrome&browserv=103&brand=unknown&model=unknown&marketing_name=moto%20g(8&tablet=2&rheight=0&rwidth=0&e=5

 

[Chief]

Thanks

 

[Gtowncrow]

Wrong place for this but...

Is anyone else getting excessive pop up spam on big footy? Doesn't happen on my desktop but my phone is almost unusable.

I keep getting pop up about being a "lucky google customer"

Doesn't happen anywhere on my phone other than BF.

Any ideas? (Android phone)

 

[thedank]

Getting smashed with the same ads as above, forum is unusable on mobile right now

 

[GreyCrow]

Not sure if it's BF or me but this is driving me crazy.

Not only does it spam me but it's only on Android Google phone.

It's annoying because swiping back I am switched to page before not page last ie 2 pages back not 1

It's only on BF

 

[iDon]

Got this before.

http://2022325luckyday.top/prize/luckyus-ad/lpphone.php?c=5ezfdcz4lz2&k=e46cac86c88a8b699476fe7546c404f6&country_code=AU&country_name=Australia&region=New%20South%20Wales&city=Sydney&isp=Telstra%20Pty%20Ltd&lang=en&ref_domain=&os=Android&osv=12.&browser=Chrome&browserv=103&brand=unknown&model=unknown&marketing_name=Pixel%206%20Pro&tablet=2&rheight=0&rwidth=0&e=5

 

[wagstaff]

Yep, been getting it too whenever logging into Bigfooty.

 

[Bont2Bruce]

Pixel 6 as of yesterday and now getting this when using bigfooty. My old pixel 3 wasn't getting this problem though.

 

[arrowman]

Wrong place for this but...

Is anyone else getting excessive pop up spam on big footy? Doesn't happen on my desktop but my phone is almost unusable.

I keep getting pop up about being a "lucky google customer"

Doesn't happen anywhere on my phone other than BF.

Any ideas? (Android phone)

Glad to hear it's not just me. I've just installed a blocker for the first time, never bothered before, so we'll see how that goes.

 

[skittlebrew]

You can block pop ups easily on Android, so many apps and settings allow for this.

Which one/s do you use? My blockers on my desktop/laptop are fine but having trouble getting a good one for phone (android).

 

[dude316]

Wrong place for this but...

Is anyone else getting excessive pop up spam on big footy? Doesn't happen on my desktop but my phone is almost unusable.

I keep getting pop up about being a "lucky google customer"

Doesn't happen anywhere on my phone other than BF.

Any ideas? (Android phone)

Try using the Brave Browser on your phone. Blocks a lot of ads and pop ups.