OT: Loveworm scam

Thought I'd report this incident, in case it's more widespread.

My browser is Firefox and one of the many extensions is called Tab Mix Plus. I haven't visited the TMP Forum for a long time. (Maybe never on this new Win 10 PC which is now 10 months old.) I did so this morning to post a question and I clearly used a bookmark which is now no longer valid: [removed by admin]. (Haven't tried it again since, so BE CAREFUL.)

It was immediately hacked (redirected), with the following page displayed:

https://dl.dropboxusercontent.com/u/4019461/Hack.jpg

A continuously looped audio track was played:

"Critical alert from Microsoft. Your computer has alerted us that it is infected with a virus and spyware. If you close this page before calling us we will be forced to disable your computer to prevent further damage to our network...."

The page and Firefox were frozen so I exited via Windows 10 Task Manager.

I'm still trying to find what caused it, probably a PUP, downloaded with some other genuine program when I was less careful than usual during the installation procedure.

--
Terry, East Grinstead, UK

Thanks, appreciate your testing it.

Terry, East Grinstead, UK

z3r010 said:

Please do not ever post infected links on any of our sites.

If you use the extension Thumbnail Zoom Plus on Fx you can hover above the link and it won't open the infected page, but opens an enlarged image. If it's an image, not if it's the page