Safari-Alert ?scam?

I was browsing Safari on my IMac today when I suddenly got a dialogue box supposedly from Apple Security called Safaro-Alert. It claims suspicious activity detected. Your browser might have been hijacked and then it gives a number to call 1-866-782-9**8 (Not Apple)

Since then I cannot quit Safari on the IMac and when I force quit it returns as soon as I open it.

Anyone else had this experience. Bob (Using my wife's MacBook)


<Personal Information Edited by Host>

iMac (21.5-inch Late 2009), OS X Mavericks (10.9.4)

Posted on Sep 3, 2014 3:29 PM

Reply
100 replies

Aug 22, 2015 8:05 PM in response to marlenefromdenver

I got this today on the iPad. I somewhat modified the helpful instructions given here, and it seemed to go away. I turned of the wifi, went to Settings-Safari-Advanced. Then I turned off the Java script. I was finally able to open Safari and change the web site. I turned the java script and wifi back on, and now it seems to be working.

Oct 4, 2015 3:06 PM in response to Stephisa

This is what I got on my Mac in Safari just a bit ago: "

Are you sure you want to leave this page?


*********** System Security At Risk ***********


Critical Security Warning! Your Mac has detected a serious attack on this system, as your IP Address seems to accessed from two different locations at one time. A Suspicious Connection was trying to access Your Logins, Banking Details & Tracking Your Internet Activity.


Please contact the Mac Support team immediately at 1-855-266-8939(TOLL FREE) Â and provide error code UR97L1DA2TA to scan and resolve the" I did call, but got cold feet and didn't actually provide the error code or any other information. (I'm suspicious of such things by nature.) Am I okay or might they have been able to do something to my computer anyway? I was able, eventually, to get out of the stupid window and close Safari, which seems to be working fine now. Just checking if I should be worried.

Dec 9, 2015 12:15 PM in response to marlenefromdenver

I think this scam may be related to the Citrix Receiver. My wife just had this pop-up come up (same issue, locks Safari up, etc). She doesn't visit any 'suspicious' sites but installed Citrix Receiver over the weekend to access a virtual machine at her University campus. Fast forward a few days and now this pops up.


I had her uninstall the Receiver and the message has not popped up since. Is it possible that the Citrix Receiver somehow allowed this malware in if the University system was compromised?

Oct 4, 2016 8:18 PM in response to marlenefromdenver

It is a SCAM

What a mess.

Apple MUST take precautions to prohibit FALSE links to the APPLE SUPPORT.

I was slick enough to prevent a ransom-ware attempt using "Quick Solutions" as a business in Jeopardy and a REFUND was the PLOY using an amateurish TEAM-VIEWER ====== HACK app to attempt to login and lock me out of my computer. What a FREAGIN joke LMAO!!!. ... in any event, these slow-pokes should be put to justice and APPLE <MUST> take more responsibility in notifying users of vulnerabilities. This was kind of amusing, easy to crack, and I left one window open and portal-ed the fingerprint to HARDCORE agencies and some off the books that will take care of business and shut these FOOOOOOOLS down. However, if you are not savvy, this is NOT A JOKE!!!

IF ANYONE READS this and happens to have been sent to an APPLE trusted network security company and then is asked to ALLOW ANY TYPE OF REMOTE ACCESS- DO NOT, I REPEAT, DO NOT, DO NOT FREAKING ALLOW IT.... easy to overcome, bit a real PIA to fix and clean completely off ones system. Fortunately, I have friends in agencies that DO care in the US which have isolated the DNS servers hosting the activity and are in pursuit of these fools attempting to commit some ridiculous "ransom-wear" esque hoax. INSTEAD CALL A TRUSTED APPLE NUMBER ACQUIRED FROM SOMEONE ELSE's COMPUTER!!!!!!!

Here is the bottom line: >>>>>>>>>>>>>>>NO ONE WILL EVER--- EVER EVER EVER ...ASK FOR FULL CONTROL OF YOUR SYSTEM. NEXT< NO REAL SUPPORT WILL EVER ASK FOR YOU TO OPEN AND ENTER BANK ACCOUNTS FOR ANY REASON- WHICH IS WHY AN ENCRYPTED BANKING BROWSER IS A GOOD IDEA. FINALLY, HELP ALL OF US who think of amateur hackers as those who need to be hunted and SHUT down and run some clever software in the background by remotely logging into a dummy user as a GHOST. CAPTURE all network activity. I can assure you that event ATP IP directed traffic will guide agencies of international origins at ridiculous attempts of being "hackers".

What is wrong with these fools? Is life that bad? Are they that dumb that the minute skills they have are used to call American folk and hold them hostage> Who raised these people? Is there anything left of humanity> >>>?

These micro scams should be made public to refresh peoples awareness and aptitude for not just preventing being a victim, but for shutting these fools down. I am attempted to isolate them and did some PI work and fantasized about holding them ransom for the digital fingerprint I could connect them too with the original transaction. Too late. Contacted authorities and did so real time by feeding the network activity during the attack.

I feel like becoming a vigilante. What has this world come too??? In all sensible reality, just venting, but please feel free to reply to invoke a meaningful discussion to this true inconvenience in my life and vacuum of time!I have a wife and a 1 yr old. Nothing to lose from cyber world, and unfortunately, not much in the bank.

All I have to say is I am proud to be a dork and to have told these hacker fools to ^ off. LMAO!!!!

NC

Mar 18, 2017 4:46 PM in response to marlenefromdenver

I think there are a lot of these out there. I'm seeing multiple different phone numbers they want you to call. I fell victim to one this past summer before I knew what it was. ANYONE WHO READS THIS: THOSE NUMBERS ARE ALL SCAMMERS. THIS ONE WAS CALLED CRESCOLOGIX AND THE NUMBER WAS 1 855 784 7425. If you call it you will hear mexican voices and a lot of people in the background scamming away. They had me write a check and take a picture of it with my computer camera and the money was shortly debited. I haven't had any more trouble with my bank account or anything, so I guess they were just happy to get my money. But my account on my health insurance website is acting very strange now, and almost won't work at all. I took my computer to a mac service store and they wiped my drive and installed avast and it seems ok. NONE OF THOSE POP UP SECURITY ALERTS ARE REAL THEY ARE ALL OF 'EM SCAMS.

Sep 5, 2014 1:25 PM in response to cathy fasano

I reported the issue to my bank and requested an stop payment to my card, they then gave me a new cad, and also recommended to change my passwords with them , which I did.

I also immediately reported to Apple the issue to: reportphishing@apple.com, and asked for their instructions or recommendations to be sure which information on my mac they may have accessed and that no suspicious or remote control application was installed during the so called "service", so they can gain access again to my mac without my authorization.Unfortunately I have had not received any answer at this point.

Thank you all for the advise

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari-Alert ?scam?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.