I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

386 answers

Sort by: Newest
  1. Anonymous
    2018-03-01T17:29:37+00:00

    I didn’t have any problem removing the Tech Support Scam, Cyber; and I already know how to report bad websites. If you review my profile, you’ll see that I did all of the original groundwork on identifying the dialog loop as the underlying issue with these Tech Support Scams, and also the promotional work for the Microsoft Dialog Loop Protection patch for this issue.

    So that’s not really what this discussion is about – it’s really about the sudden appearance of malware and Tech Support Scams on the Edge Start page. I understand that my original title was impromptu and didn’t properly convey the content of the thread, so I agree that it should be changed. But I’m going to edit your edit in order to more accurately reflect the content of the discussion. 

    Thanks,

    GreginMich

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  2. Reza-Ameri 45,891 Reputation points Volunteer Moderator
    2018-03-01T14:57:29+00:00

    In Microsoft Edge, click on Setting which is ... on the top right corner , then Send feedback->Report unsafe website and report it. Whenever you see such message do this. Cancel or Close pop up, if it is stopping you from reporting the website.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2018-03-01T14:10:39+00:00

    Microsoft is doing what it can to make people aware that these scammers are impostors and fraudsters: 

    https://www.microsoft.com/en-us/wdsi/threats/support-scams

    https://blogs.microsoft.com/on-the-issues/2017/05/18/fight-tech-support-scams/

    https://cloudblogs.microsoft.com/microsoftsecure/2017/03/02/breaking-down-a-notably-sophisticated-tech-support-scam-m-o/?source=mmpc

    But these Tech Support Scam pop-ups are normally only seen on malicious sites or legitimate sites that have been “compromised” – and what I’m reporting here is that I’m seeing malware and Tech Support Scams on the Microsoft Edge Start page. Ideally, we could let Microsoft know what’s going on here – but the communication lines are always full of chatter, and static, and cutoffs – and the message never seems to get through. So I started this thread in the hope that we could monitor this situation, and see how many other people are being attacked by malware on the Edge Start page.

    Here’s the most recent report of this issue:

    https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/windows-defender-vs-fraudulent-adobe-update/68c9bdad-94ef-4125-a265-53881ae8eee5

    GreginMich

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2018-03-01T08:22:18+00:00

    I forgot to add that a User recently reported >in this thread<

    having had the 'talking' scam ad

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2018-03-01T08:16:45+00:00

    Hello. In January last year, there were a number of Fake News bulletins on Facebook that eg Kirk Douglas, Helen Mirren, HM Queen Elizabeth had died.

    I clicked on the first one thinking it was genuine. Up popped the pop-up and what was worse there was a voice telling me what I had to do to get rid of the "dreadful Trojan". It was a real beggar to get rid of, including switching off my laptop.

    I created this thread in the Community.  I was disgusted that (in public) Microsoft did absolutely nothing to do anything yet their reputation was being put at risk.

    https://answers.microsoft.com/en-us/windows/forum/windows_10-security-winpc/facebook-helping-scammers-attack-microsoft/d047f36c-a3d7-4648-9961-6b04408c5eb7

    I also emailed all of the USA stars/their agents to alert them to it but presumably they binned them, perhaps thinking the emails were from a madman. To see that pop-up appearing again is such a disappointment and I hope that you guys with your clout will be able to nudge Microsoft in the right direction

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments No comments