I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-06-22T09:19:28+00:00

    Hi Rodrigo. I was taken to MSN after signing out of this Community/outlook.com. I'll do the other feedback later when I return home.

    PS added at 10:21 The first screen was appeared was covered in red shock/warnings but disappeared before I could take a screen print.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2018-06-07T22:17:27+00:00

    You can't remove 'all of Flash' - Microsoft has its own built-in Flash Installer which it updates as necessary eg the latest WU for Win10. 

    But now this has been reported!

    https://krebsonsecurity.com/2018/06/adobe-patches-zero-day-flash-flaw/

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2018-06-01T05:21:39+00:00

    Just got the virus alert whilst reading 

    https://www.msn.com/en-gb/sport/football/mark-almond-abramovich’s-decision-to-drop-£1bn-chelsea-stadium-isnt-just-a-hissy-fit-by-a-spoilt-russian-oligarch-it’s-far-more-menacing-and-could-be-an-explicit-instruction-from-putin-to-even-the-score-with-the-uk/ar-AAy5MFD?ocid=spartanntp

    Have feedback as you requested. I have screen shots if they are needed.

    Edited at 06:38 to add: Ran MBAM and got a clean bill of health.

    Edited at 06:42 to add: I got to that article on the screen showing immediately after logging into my MS account.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2018-05-30T18:45:22+00:00

    Hi all,

    I'm on the MSN Engineering team and would love help if anyone encounter this again. We've been tracking this since it started in mid February. We do quite a bit of work to scan the ads we get from our exchanges, but some behave differently for certain users than they do when we do our scanning. In the future, please continue to submit feedback so we can narrow the scans on our end and potentially reproduce and remove this once and for all. If your page was hijacked and you couldn't view the article, please mention the article headline you've visited as well. 

    If anyone is still experiencing this, please reply here. 

    network security terminal 3600 are still on my computer

    Thanks,

    -Rodrigo (MSN Engineering)

    I believe that network security terminal 3600 is a scam. they are still on my computer after I told them to remove.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  5. Anonymous
    2018-05-27T00:30:03+00:00

    Last night I downloaded the BIG Windows 10 upgrade.  Today I was looking at the MSN opening page in MS Edge ( slideshow for Tomas Jefferson's home ( Montechello ? ) when the computer was taken over with the demands to call the help office ( probably this same scam ).

    I could not turn off by software or the off button so unplugged the computer.

    When I replugged, the voice was still active.  And the threats !

    Finally I left the computer unplugged for several minutes and then got a normal restart.

    Window defender apparently was unaware of all this.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments