Do not respond to scam pop-up messages in your web browser

An email I received from the Australian Government:

You are advised to ignore scam pop-up alerts in your web browser asking you to phone a number to remove a virus. These alerts, which aim to mimic genuine warnings from security software, may appear after you open an email attachment, download files, visit websites hosting malicious software or click on a pop-up advertisement.

Stay Smart Online has received information about a fake pop-up that states ‘Chrome Browser has detected a new virus’. The fake alert goes on to say ‘WARNING! TROJAN (TRJ.DealWare.Stealth) HAS BEEN INJECTED INTO YOUR COMPUTER’ and provides a 1-800 toll free number for the recipient to call.

The scam Chrome browser popup window reads in full:

The page at [link removed] says

Chrome Browser has detected a new virus

WARNING! TROJAN (TRJ.DealWare.Stealth) HAS BEEN INJECTED INTO YOUR COMPUTER.

You must call this toll fre (incorrectly spelled) number 1-800-993-948 now.

The new trojan (TRJ.DealWare.Stealth) cannot be detected by current virus software. Failure to immediately call the number provided will result in computer failure.

Browser Chrome

Operating System Windows 7

Toll Free Helpline 1-800-993-948

PLEASE CALL THE NUMBER PROVIDED TO REMOVE THE VIRUS.

OK

[message ends]

A second similar web browser pop-up scam has been reported. This scam claims Microsoft has detected a virus and asks the recipient to call a Network and Security Team on a toll free 1-800 number for a fix.

The scam Microsoft popup window reads in full:

Are you sure you want to leave this page?

Message from webpage

System Alert.

Browser Blocked for Security Reasons.

Microsoft had detected that a virus has infected your system and trying to steal pictures , data and social networking passwords. This is a serious hacking issue. Rectify it immediately.

ERROR CODE: smResvErr - 307

Tell this error code to the agent.

This may happen due to obsolete network protections.

To fix, please call Network and Security Team at 1800 649 546 (Toll Free) immediately.

Consequently we are performing additional securi (sentence ends in the middle of the word and without a fullstop)

Leave this page

Stay on this page

[message ends]

Malicious pop-up messages may claim that the alleged virus or trojan cannot be picked up by ‘current virus software’ and that failure to immediately call the number will result in computer failure. They may also incorporate an ‘OK’ button that you should not click on under any circumstances, doing so may expose you to more pop-ups, or infect your computer with malware that allows an attacker to steal your personal or financial information.

To avoid damage to your device close the web browser immediately, or if you are unable to close the web browser, restart the device and run an anti-virus scan; or alternatively seek advice from an IT security professional. Do not call the toll free number provided in the pop-up. The scammer who answers may offer to sell you bogus antivirus software that also contains malware, or may request remote access to your device to fix the alleged virus. Access to your device may expose your personal or financial details that can be used for identity theft or sold to other criminals.

While most anti-virus pop-up alerts inside web browsers are fake, you can also receive legitimate virus warnings. If you are unsure whether it is a genuine warning, check with your installed anti-virus software provider. Alternatively visit the official virus details page of your anti-virus provider or ask a computer professional.

Staying safe

  • Keep your computer updated with the latest anti-virus and anti-spyware software. Also use a good firewall.
  • Never open attachments or click on links in emails unless you can verify the sender and you trust them.
  • Never rely on the contact details provided in a pop-up message. Instead, find your anti-virus vendor's contact details through their official website.
  • Avoid questionable websites. Some sites may automatically download malicious software on to your computer.
  • Use reputable pop-up blocker software to avoid pop-ups on your computer.