I get a pop-up window asking "Do you want to download "occ" in my Safari browser

Bobbaliu wrote:

Hmmm, Apple Support has removed my post. They seem pretty responsive in protecting their brand. But when it comes to protecting us or simply keeping us updated, not so much. Welp!

Your previous post included a link to your own x post and directing users to it for self promotion. That is a clear violation of the Terms of Use. It is less about Apple protecting their brand and more about Apple not promoting yours.

Apple Support Communities Use Agreement - Apple Community

Here is the link to contact Apple directly:

Contact Apple for support and service - Apple Support

I have seen one user that has contacted Apple and has an appointment with an Engineer today, so we will see what the outcome is. It may require an update to iOS or may be a problem with an external product such as the Wordpress hack that compromised many news websites earlier this year. There is no doubt it will be addressed and luckily you have an iOS device where Malware will not be able to be installed on the System even with the download button. Other device manufacturers may not be so lucky or even able to identify it. Stay tuned!

iPhone SE 2020 with iOS 17.6.1 and Safari browser:

I am getting the “Do you want to download ‘occ’” popup very frequently on ALL of the major news websites (ABC News, CBS News, NBC News, etc.)

The popup does NOT occur on normal, non-news-related websites.

I am in Canada and started getting this same thing a few days ago. It’s super annoying and cannot understand why Apple is not dealing with this considering their products cost a lot of money. I am getting this on news sites and am using an iPad Air.

Thanks for taking the initiative to actually contact Apple and look forward to any updates you can provide in the future. If I see any updates from other users who have engineers looking into it from other threads, I will make them available here as well.

O que me disseram foi que há algo ligado a ditadura brasileira do x. Parece que as autoridades estão tentando identificar quem acessa o antigo Twitter para multar ou prender e está havendo algum tipo de bug mundial por parte da Apple por estarem tentando aplicar um tipo de rastreador por ordem da anatel e está afetando a todos. Pelo menos foi o que estão dizendo no Brasil!

I’ve noticed it seems to happen on websites that have video that auto plays, which most news sites seem to have.

I also had a pop-up that instead of “occ”, it was “sync”.

I thought it might have something to do with the update to iOS 18 since I wasn’t having the issue prior to updating.

I’ve seen this pop up a couple of times on Safari, running 17.7. Both related to browsing major news sites.

I don’t believe I downloaded the file when I closed the popup. I’m still concerned.

Can someone confirm that the single location downloads from Safari go on iPhone is to Files?

(I’ve checked Files and don’t see any new downloads.)

This is a very helpful response, a concise synopsis of what’s being reported by the community.

And it’s also reassuring, particularly that last part about how executable files cannot be downloaded to iPhones.

Thank you.

Just to be safe, it’s an unknown thing. I do most of my work on the iPad Pro. I didn’t click it, but it’s really easy to accidentally do it when your using a mouse. And to be honest I have to update my iPad anyways. But would it work? I’m going to stay off random news sites for now.

I’m getting this all the time in Safari and I just updated to iOS 17.7 on my iPad Pro, so it’s not just limited to iOS 18 users. (That’s probably already been mentioned, but I didn’t take the time to read every message.)

Happens on NBC, CNN, ESPN, etc.

Lizaroo71 wrote:

I keep getting the same pop up. I’m sharing here because Apple is notorious for telling me NO ONE ELSE has reported that issue. Consider it reported.

Out of all the posts here, I have only seen 2 people that have actually reported it to Apple using the link that was provided. You would be wrong to think that your post here is being reported to Apple.

Me too on iPad…running 17.7 and it’s been happening

for about a week now. Pops up on some news sites and almost always with ESPN. For two weeks prior I got a different one on ESPN, so I’m wondering if that’s related somehow.

Hello Everyone,

I thought I’d share that I’m now getting the same download on Firefox for iPadOS 18. The difference here is that Firefox gives you slightly more information. It shows the download as coming from ups.analytics.yahoo.com.

I hope this is another piece of the puzzle.

Just got it on Reddit, but it was different...looked like it was trying to actually download with a status bar and said something about Yahoo as well. I should've screenshotted it but it freaked me out so I shut down my device.

One of the posters here who spoke with Apple support, said: “They (Apple support) were largely unaware of the problem because I’m assume the gross majority of people did not reach out to them.”

A problem this widespread should have been discovered during functional and regression testing before the new software was rolled out. Apple should not be relying on users to report problems like this.