5

When using Chrome on my Nexus 6, I often get taken to a data URI that causes a modal that reads something like:

An embedded page at s3.amazonaws.com says: Message! Congratulations Grande Communications user, you have been chosen for a chance to get a new iPhone.... Click OK to continue

There is no Cancel button. Why does Google allow developers to launch pop-ups with no cancel button?

This doesn't occur from clicking on a link. Usually it happens while I'm on a tab, and suddenly another tab will spawn with the modal. I don't think it's caused by a visit to a dubious host, because it's happened when I've had only top sites (Amazon, ebay, etc.) open in the other tabs.

I have run Malwarebytes and a few other security tools and they all say my phone is secure and clean.

What exactly is happening? On the standard Chrome browser, web extensions can rewrite URLs but Chrome for mobile doesn't have web extensions. Could an app intercept network calls from the browser? Could the sites I'm visiting just be serving malicious ads?

6
  • Try clearing the browser cache and see if that repeats?
    – beeshyams
    Commented Aug 28, 2016 at 3:24
  • Can you do some testing to try to narrow down websites you see it on. I would be surprised if the big guys were hijacked in this way. Are you seeing this over HTTPS? Commented Aug 28, 2016 at 3:37
  • Also are you seeing this on Mobile internet or Wifi or both? I.e. if you go and turn off cellular and connect to a 3rd party wifi say Starbucks Wifi - do you see the popup? Commented Aug 28, 2016 at 4:37
  • I see this at home over WIFI. Commented Aug 28, 2016 at 7:19
  • Neither clearing the browser cache nor deleting suspicious software helped. Commented Aug 28, 2016 at 16:17

3 Answers 3

1

Actually nothing is malicious or exploitable of what you described.

The popup without a cancel button is just a javascript alert. When you press OK nothing happends because you pressed OK. You get redirected because that's simply the next line in the javascript script.

These misleading ads can be blocked with an ad blocking app such as AdAway, although they require root. You could also simply use the Adblock Browser.

Unless you download or install content from such malicious websites you are malware free. Even if they open already installed apps on your phone (Such as Google Play or Gmail) nothing malicious will happen without your consent.

tl;dr
Watch what you allow/install

0

I found today that it does it on the same site every time I pass it. It must be an ad from that page launching it. As long as you push the back button and ignore it there doesn't seem to be any problem. I do hope they figure out a way to eliminate those ads, it's irritating and a lot people aren't aware enough to just leave it alone.

0

Disable the Java-script on that Website, I think it will remove the problem. It is not some sort problem related to virus,it is no-script function which is triggered by java-script when you click on page.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .