I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2018-09-23T16:24:05+00:00

    This thread is being locked. It has run it's course anyone experiencing similar issues should start their own new thread.

    ~bhringer

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2018-08-17T18:39:59+00:00

    Incidentally, here's the first page of the pdf at Blackhat:

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  4. Anonymous
    2018-03-02T16:00:03+00:00

    All of these are scams I have seen more than once.

    As long as your Adobe Flash Player is turned off in Edge it isn't going to be updating come hell or high water. 

    The other scams are usually of the "drive by" sort which means the website you are visiting just happened to have a "lurker at the threshold" when you visited...whether you are using the "Edge" homepage or a different one (personally I use the Microsoft Page as my "Home Page" and have never seen any of these THERE, at least).

    But I do encounter them here and there...now and then. One day I'll meet one at a usually "safe" page "Daily Videos" for example or one of the various news sites. The answer, of course, as I know everyone here knows is not to respond and to shut your browser down using your "Task Manager".

    I understand that some have a problem using this as the page "reloads" automatically when they open their browser again. This setting fixes that:

    And, of course, this setting also helps a good deal with these nuisances:

    Well, that's my contribution to the discussion, anyway.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-03-02T15:40:44+00:00

    I just walked away for about 20 minutes to check on a Windows 10 reinstallation that I’m doing for a friend – and this is what had replaced my news article upon my return:

     

    So now I’m wondering if the issue might be more easily reproducible if you just give the page some time to cycle through all of its ads. I’ll give that a try myself on another machine.

    GreginMich

    Was this answer helpful?

    0 comments