Virus on pprune

[IBJoel]

Hi all, turns out some of the "Congratulations" ad redirects are triggered by the phone's accelerometer. If a user puts their phone down on a flat, stable surface, the ad will not trigger. Obviously this is not a permanent solution, but it is another line of defense.

[apacau]

Adbuster worked a treat! Thanks for the tip!

[wooski]

Hi There, made a capture this morning

You can see it redirects a few times before the final url with the popup
seems the first domain is "honestly.desksuggetion.site"
then redirects to another url
ive also seen "au_ocean.asia.gifttoday.club"


the gif has been uploaded here if the attached gif doesn't work
imgur.com/a/YqQ5h

Originally Posted by IBJoel

Hi everyone. We work to combat these ads, but we also require help from you. To pinpoint them, it is most helpful if you post a screenshot of the ad/redirect site, and tell us your browser/operating system.

[CCA]

Only happens in Australia using the mobile site wether using WiFi or the phones 3G.

Only way to stop it on a iPhone / iPad is to go to Settings > Safari > Advanced > JavaScript - toggle OFF
our don't use the mobile site.

Congratulations!

Telstra Internet User!
You has been selected as the winner of today's FREE iPhone 7,PlayStation 4 or Macbook Air!

Please click ok to claim your prize before we giveaway to anyone else!


http://apple.com-2au-pal2.get-your-new-gadgets.review/winip7en_ios.html?isp=Telstra%20Internet&model=iPhone&101.16 4.211.63&voluumdata=BASE64dmlkLi4wMDAwMDAwMi0wZDQ4LTRhMDUtOD AwMC0wMDAwMDAwMDAwMDBfX3ZwaWQuLjJiN2FiODAwLTc5OGEtMTFlNy04Mm MyLTA1YmU0MWZlNjk5NF9fY2FpZC4uYjM1OGE5ODgtM2Q0MC00MDE1LWI3ZW YtMzRmYTYzNzdmZDYxX19ydC4uRF9fbGlkLi5kY2VhYzFlNi1jNWViLTQ3Nj UtODFkNS1kZmM4ZTFlMGM2ZWJfX29pZDEuLjhmYmJmZjQzLWQzNzMtNGIzNS 1hMjVjLTk5NTlmYmRlM2M4N19fdmFyMS4uMTUxNDM1X192YXIyLi4xNTAxOT A0ODY3X192YXIzLi5jblJpZkRFd01TNHhOalF1TWpFeExqWXpmREl3TVRjdE 1EZ3RNRFVnTURNNk5EYzZORGQ4TVRZd2ZEVTJNRFI4TVRnMk16VjhNWHd4Tl RFME16VjhRMUJOZkRndU1VVXROSHc1T0RCOE1UVXdNVGt3TkRnMk56ZzFObn d4TURNNE1YdzNNell5ZkRFd01UQXhNVEl6X192YXI0Li4kYm9cX1xja19fdm FyNS4uM2Y3MWQ2YTcxMzA3OGI5NzBlZGNjMTZhM2FlYzVjYzVfX3JkLi5fX2 FpZC4uX19hYi4uX19zaWQuLl9fY3JpLi5fX3B1Yi4uX19kaWQuLl9fZGl0Li 5fX3BpZC4uX19pdC4uX192dC4uMTUwMTkwNDg3MjM2MA&siteid=151435&s itedomain=1501904867&page=cnRifDEwMS4xNjQuMjExLjYzfDIwMTctMD gtMDUgMDM6NDc6NDd8MTYwfDU2MDR8MTg2MzV8MXwxNTE0MzV8Q1BNfDguMU UtNHw5ODB8MTUwMTkwNDg2Nzg1NnwxMDM4MXw3MzYyfDEwMTAxMTIz&sourc e=$bo_ck&pub=3f71d6a713078b970edcc16a3aec5cc5

[mickjoebill]

Yesterday I downloaded the $1 app for iPhone called "Crystal"
Works out of the box immediately.

It has an option to allow advertising so you can continue to support Pprune.

Mjb

[virgindriver]

Also happens outside of Australia viewing the full site on iPad...

[Metro man]

Been getting redirected to some dodgy links while browsing JetBlast today. My Trend Micro Antivirus has been working overtime blocking them.

This is the link I'm getting;

https://lifegoalie.com/l/8c579bd6-24...-11506689a78b/

Another one.

http://thequantomcoding.com/?t=wEPL8...4&adv=504&ts=v

[LostProperty]

LIfegoalie is a known nasty - don't know about the other one but I would not click on either of these two links. In fact they ought to be removed from the post.

[Metro man]

Only put up for the tech team to sort out, don't click on them.

[IBJoel]

Thank you guys, these sites have been reported.

[wiggy]

Late on parade but as a European I can report it like wot virgin driver said, i.e.

Also happens outside of Australia viewing the full site on iPad...

Started stuffing things up for me last weekend, (Sunday if I remember correctly) and was quite clever in that it kept offering me the aforementioned draw but in our local lingo (French). Seems to have fallen off it's perch about 48 hours ago. Thanks to whoever fixed it because for a while pprune via the iPad was unusable.