I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2018-04-13T16:24:20+00:00

    The feedback I need is from any page. You can go to any page that doesn't redirect and send it with the requested note.

    I did get a few folks from here already sending and my team is digging deeper into the data to help narrow down the offending ad. I hope to have an update on this next week.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-04-13T16:27:24+00:00

    Greg, have you had a chance to send feedback? You can do it from any page in MSN right after you get this repro. I'll link the activity on my backend, but need the lead data from you. This is the highest priority item for one of my engineers. Hoping to get an update next week based on data I've already got from folks here, but any additional data is helps.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-04-13T17:49:04+00:00

    I did send the feedback for this most recent incident directly, Rodrigo – but I sent the feedback for the previous incident through the Edge “Report site issue” channel, since I wasn’t aware of the onboard channel. Now that you’ve clarified things for us, I’ll definitely make a habit of sending a report for every malware/scamware incident. The floating feedback tab does seem to disappear when I page back to the news article, but I just use the small link at bottom center. I very much appreciate the priority that you’ve assigned to this issue.

    GreginMich

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-04-13T18:20:56+00:00

    I guess I'm computer stupid but, does this mean that I'm OK to go?  Has the threat been gotten rid of?

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-04-13T18:31:02+00:00

    I have not got confirmation that the thread has been put down. While it might not show up right now, it could. I'm hoping to have more information on it by next week.

    Was this answer helpful?

    0 comments