Android Malvertising/Browser Hijack? - Security Discussion

Sometimes when surfing the web on my phone I end up either having the play store open with a suggested app or have the page I was starting to read redirected to another site informing me that my device is slow or a similar message.
I'm increasingly seeing these on different Android devices: My Nexus 5, my mothers S4 Mini and even my father owning a S3 sees these kind of adverts every now and again.
Tonight while browsing an XDA article, I was redirected to another page telling me that my phone was running slow. So I closed the tab, and tried to go read XDA once again, and again I'm redirected to this dodgy page asking me to download software. It appeared to do this until I cleared my cache, cookies etc. Was this a browser hijack!? I have scanned my N5 with Malwarebytes to be sure nothing was actually saved to my device and it came up clean.
I am using Stock 4.4.2, not even rooted. I was using Dolphin browser while browsing XDA when this occurred. My question is: how can I prevent this from occurring again? I am fairly sure my phone isn't home to any malware as I always scrutinise apps and their permissions prior to installation.
Sent from my Nexus 5

Hmm. I have no idea what Dolphin does as far keeping up with browser exploits and how well it does as far as security related stuff.
What I use is Firefox with http://noscript.net/nsa/ and https://addons.mozilla.org/en-US/firefox/addon/self-destructing-cookies/ (but mobile version).
Once when I was malware hunting shady sites I did get a different result when checking said sites with my phone (they have some malware distribution sites smart enough to check the browser's User Agent to see what the person is using). Basically it started showing me a scare-ware sort of "Scan now to fix virus!" sort of app, which I then just uploaded to VirusTotal (they share the findings with AV providers).

Specially when im on XDA Developer with Boat Browser sometimes automatic open PlayStoreApp with Cleanmaster or something.
Often popup like Whatsapps beeing expired,
u got virus popup !!??
some strange behavior !!
only on XDA Developer Side !?
Any solution !?

Related

Apps launch and then quit. Pulling my hair out. *SOLVED!*

Bing, News, Amazon Kindle are a few apps which launch for one second and then quit. Even mail and people tiles do not update any longer and live tiles stop working. I have uninstalled these apps and reinstalled them where they begin to work again for a bit and then start playing up again. I have refreshed pc and still same problems. Also in Notifications tab in PC Settings, where it says Show notifications from these apps, there is nothing listed. They were listed after a refresh and no longer there.
I have all the latest updates installed and I think that is where the problem is. I bet one update is causing the problems. I feel like refreshing again and not installing any kb updates or firmware updates. Really really frustrated.
Any ideas? Solutions? Magic words?
Sounds awful. Do you have a stable WiFi connection? I have noticed that the Surface wants good connection or she gets weird. Surfing the web ok? Don't have to tap links multiple times to go anyware?
Sent from my HTC One X using xda premium
wardh said:
Sounds awful. Do you have a stable WiFi connection? I have noticed that the Surface wants good connection or she gets weird. Surfing the web ok? Don't have to tap links multiple times to go anyware?
Sent from my HTC One X using xda premium
Click to expand...
Click to collapse
WiFi is good.
Did you recently change your mSD card ?
tboy2000 said:
Bing, News, Amazon Kindle are a few apps which launch for one second and then quit. Even mail and people tiles do not update any longer and live tiles stop working. I have uninstalled these apps and reinstalled them where they begin to work again for a bit and then start playing up again. I have refreshed pc and still same problems. Also in Notifications tab in PC Settings, where it says Show notifications from these apps, there is nothing listed. They were listed after a refresh and no longer there.
I have all the latest updates installed and I think that is where the problem is. I bet one update is causing the problems. I feel like refreshing again and not installing any kb updates or firmware updates. Really really frustrated.
Any ideas? Solutions? Magic words?
Click to expand...
Click to collapse
Have you contacted Microsoft or Amazon about those apps? Maybe it's the HW and you need to exchange? Unless you want to wipe everything as a last resort use alternative apps until that's sorted or the web browser. For news I would use this aggregator called news republic instead of the default app because it's faster at loading up, playing videos, and opening up articles. I don't use Bing, people, mail, or amazon kindle. Don't think there's anything that gets you live tiles n does everything those programs do. So it seems nothing you can really do.
Their is a Microsoft fixit for windows store apps not launching, a simple search will find it. If it tells you that it found corrupted files then a complete reset is in order. Also if you have done any of the tweaks, some of them can cause instability. If you have then retroactively undo the tweaks until you find the cause.
Ok I solved the problem. A simple refresh of the pc was not enough as it does not delete your apps or databases. I there chose to remove everything and reinstall the os which DOES delete the apps and data. This solved the crashing apps and non syncing mail/dead live tiles. I guess due to some corrupt data for the apps.

[Q] Keep getting ad ware/browser redirected

I keep getting pop ups in apps (IGN, TMZ,) and the web browsers (dolphin, Chrome,) that say Phone infected, internet to slow, out of date software, Etc.
On the web browser it keeps directing me to adcash websites and the app store to download "APPs".
I have tried different roms and started from scratch and keep getting these messages. I can look at a web page in the browser with out it sending me to some spam page.
Any way to fix this?
If you're rooted, try using some sort of Ad Blocker. Also, don't ever click on those things that say you have a virus, those are phishing attempts.
Sent from my HTC6525LVW using Tapatalk
I know not to click on them but ive had this issue since my Note 3. I will try add blocker, thanks.

[Completed] Unresponsive script? keeps freezing while web surfing

Hi I am currently using Nexus 6
Since few days ago when I was web surfing, chrome kept freezing and crashing.
I cleared all data, history and cache of chrome. Moreover, I re installed Chrome as well.
However, i couldn't solver the problem.
I thought it might be the problem of chrome, so I tried to use different web browser such as firefox and opera.
But still the problem remains.
The name of unresponsive script is voken eyereturn com
How can I deal with this problem?
Hi
It might b possible that ,one of the sites you are visiting is using eyeturn . which is using that script.
One of the ways to do is ,root your phone and install Adblocker like ad away
http://forum.xda-developers.com/showthread.php?t=2190753
Otherwise ,you will have to stop using an app/ or visit that website which downloads that script.
You can try using Nexus 6 Q/A section for better support in this regard
http://forum.xda-developers.com/nexus-6/help
Good day !

Adware Removal Help

Hey everyone,
I'm new here and I am hoping y'all can help me out. I recently started getting onclick redirect ads on my S6. I get them in Chrome, Dolphin, Maxthon Browser as well as apps such as Smartnews and bleacher report. These redirect ads are prompted only when I open a new link. They do not happen 100% of the time I open a new link and they do not redirect spontaneously. I have no other pop up ad issues to speak of. The only online browser that does not get the redirect ads is Opera Mini. I started getting these ads about a week ago but I had not downloaded any 3rd party apps. I download exclusively from the app store. After scouring the internet for advice I tried the following without success:
1) delete all recently downloaded apps
2) Clear cache and delete history in my internet browsers
3) Factory reset for phone settings
4) Change the DNS in case it was an infected router
5) Use multiple antivirus/malware programs
At this point in time I got desperate and decided to format the phone. After formatting the phone I did not allow it to download any apps. I opened chrome and still had the redirect ads. I started using my old phone to browse the internet because I was tired of the redirect ads. I turned on my S5 and found that I had the same redirect ads. This is the first time I have used my S5 in over a year and I did not have this issue the last time I used it. After finding the redirect ads on my S5, I was worried that it was somehow related to my google account. I formatted my S6 for a second time and created a brand new google account. I still have the redirect ads.
tdlr; I have formatted my phone multiple times, I have tried every piece of advice I have come across and I still have redirect ads on my S6
Any help would be great. I am at my wits end. Thanks in advance.

[HELP] Browser Hijacking / Malware

Hi everyone
Need some advice please, my phone (HUAWEI MATE 9, Android 9, Stock) has recently become the victim of some nasty browser hijacking / malware, where whenever i browse or just use my phone in general, the browser would open and random redirects to ad sites would occur.
At first i thought it was just Chrome, then i disabled it and downloaded FireFox, but the issue still occurs.
It also randomly happens with general usage, one moment you will be browsing your photo gallery, the next the browser launches and re-directs you to one of these ad sites, and is incredibly annoying.
I have not downloaded any dodgy apps or installed from apk's.
Things i have tried
- Ran Malwarebytes Scan = No issues found.
- Cleared Browsing history and cookies for Chrome.
- Installed a completely different browser.
- Disabled personalized Ads setting within my Google Account.
Any help advice to remove this will greatly appreciated, my phone is however not rooted and running stock firmware, and don't really want to resort to a factory reset.
Thanks in advance
Serenath said:
Hi everyone
Need some advice please, my phone (HUAWEI MATE 9, Android 9, Stock) has recently become the victim of some nasty browser hijacking / malware, where whenever i browse or just use my phone in general, the browser would open and random redirects to ad sites would occur.
At first i thought it was just Chrome, then i disabled it and downloaded FireFox, but the issue still occurs.
It also randomly happens with general usage, one moment you will be browsing your photo gallery, the next the browser launches and re-directs you to one of these ad sites, and is incredibly annoying.
I have not downloaded any dodgy apps or installed from apk's.
Things i have tried
- Ran Malwarebytes Scan = No issues found.
- Cleared Browsing history and cookies for Chrome.
- Installed a completely different browser.
- Disabled personalized Ads setting within my Google Account.
Any help advice to remove this will greatly appreciated, my phone is however not rooted and running stock firmware, and don't really want to resort to a factory reset.
Thanks in advance
Click to expand...
Click to collapse
Boot the device into safe mode and use it for a while in safe to see if the issue still occurs. If it does not have the issue while using safe mode, the issue is being caused by something that you installed. If it still continues to have the issue while using safe mode, the issue is being caused by something that was factory installed.
Sent from my SM-S767VL using Tapatalk

Categories

Resources