Is this a scam?

Question

Level 1

60 points

Is this a scam?

From time to time I get a popup on entering Safari browser 10.1.2 on a MacBook Air 10.10.5.

Don't know if related but this happened within a week of my installing Flash Player PPAPI Plug-in version 30.0.0.154 -- by clicking in SystemPreferences>FlashPlayer> install now, which took me to

the Flash Player website. I did this a little differently than in the past: at the end of the installation

the last panel says "finish", which I have in the past clicked and then gone to downloads and double

click to the installation. This time I went to the downloads and double clicked, and the panel that

said 'finish' did not reappear to click that tab.

The popup that appears from time to time has at the top of it 'Join ______" (with my modem SSID number

next to it). The apple icon is a white apple in the horizontal menu under this followed by: MAC iPad iPhone

.. TV New Support a search icon and the icon for shopping. Then appears the message: "The page you're looking for can't be found". (I very large dark font) {this is different color and size font that I have otherwise

seen for this message before, and it otherwise only appears when trying to visit a website and never

at the opening of Safari alone} Under this message is a search box with that magnifying glass icon and

"Search apple.com" written in the box. Then this very large pop-up says: "or see our site" and gives the

address: https://apple.com/Ooktq3s55/prop47u3c.html

I am feeling frozen to click or explore any of it. I click the 'cancel' tab in the lower right hand corner or the

red button at the upper left hand corner to close the window, and it closes -- but then appears again on entering Safari on another daily, perhaps every third day (which is to say not every time I enter Safari).

Is there a notice of this scam happening that I can read about? What to do? (Please don't ask for a screenshot-

never done one before and trying something new at the same time as fearing the consequences of this as a

scam is too much for me right now.)

Thank you for your time and consideration.

MacBook Air (13-inch Mid 2013), OS X Yosemite (10.10.5), Memory4GB1600MHz,Processor1.3GHz

Posted on Aug 24, 2018 6:45 AM

Reply

Answer 1

Top-ranking reply

macjack

Level 10

111,242 points

Aug 24, 2018 7:27 AM in response to allan299

Never download Flash Player from a pop-up. These are phony Flash installers that will install malware. Only download it either from the Official Adobe Website or from within System Preferences > Flash Player > check for updates.

Try these steps:

Force Quit Safari ( command + option + esc keys).Then restart Safari holding the Shift key. If you still have problems Empty Caches (Safari menu > Preferences > Privacy > Remove all website data. (This will also remove history if you do not want to remove History open Safari Preferences > Advanced and check mark “Show Develop Menu” then choose “Empty Caches” from Develop Menu ).

Then go to Safari Preferences > Extensions and check there. If there is an extension delete it.

If the problem persists then download and run Malwarebytes. Malwarebytes was developed by one of our own colleagues here in ASC and is about the most proven anti-malware software for Mac.

Reply

Answer 2

allan299 Author

Level 1

60 points

Aug 24, 2018 12:03 PM in response to Eric Root

Eric, I shall read these articles.

Last year when I had an iCloud scam popup part of the solution that you

suggested and that I have tried with success now in this case, is as I understand it: Finder > Go > Go to Folder > type in: ~/Library/Safari/Databases

What this does is remove the website data that doesn't remove just using:

Safari>Preferences>Privacy>Manage Website Data

when the history is removed, except for the 'databases' ones.

In 2017 this worked to remove the popup window, so I tried it earlier today

and so far -- no popup. So thank you again!

How to they use that space/way of getting into the workings of the computer

and produce these scamming pop-ups?

Reply

Answer 3

allan299 Author

Level 1

60 points

Sep 29, 2018 12:07 PM in response to allan299

Calling Apple Support phone service was very helpful.

In showing this picture, and pressing F3 to get behind it when it was blocking the entire screen, it was labeled on the Mac Air OS 10.10.5 as a "Captive Network Assistant".

Here are the things you can read about the term for understanding and relief:

WHAT IS A CAPTIVE NETWORK ASSISTANT

THE BEST VIDEO: https://www.youtube.com/watch?v=-SWcfQX6lTQ&frags=wn

https://www.cisco.com/c/dam/en/us/products/collateral/wireless/small-business-50 0-series-wireless-access-points/at_a_glance_c45-728251.pdf

https://www.youtube.com/watch?v=z5Fhpi190_g&frags=pl%2Cwn ................................

I am satisfying my anxiety about it with this information. I don't go to hot spots, but do have a very active airbnb operating next door to my residence (might that be the source?) At any rate I am just closing the close button, and the page is removed and I move on into using my computer, otherwise undisturbed.

Reply

Answer 4

allan299 Author

Level 1

60 points

Sep 29, 2018 12:15 PM in response to allan299

THIS IS WHAT WORKED FOR ME, after trying all the suggestions offered by well intentioned and

capable responders:

Calling Apple Support phone service was very helpful.

In showing this picture, and pressing F3 to get behind it when it was blocking the entire screen, it was labeled on the Mac Air OS 10.10.5 as a "Captive Network Assistant".

Here are the things you can read about the term for understanding and relief:

WHAT IS A CAPTIVE NETWORK ASSISTANT ?

THE BEST VIDEO and summary I could find is:

https://www.youtube.com/watch?v=-SWcfQX6lTQ&frags=wn

https://www.cisco.com/c/dam/en/us/products/collateral/wireless/small-business-50 0-series-wireless-access-points/at_a_glance_c45-728251.pdf

https://www.youtube.com/watch?v=z5Fhpi190_g&frags=pl%2Cwn

................................ I am satisfying my anxiety about it with this information. The 'best video' indicated

ways of getting around the situation.

I don't go to hot spots, but do have a very active airbnb operating next door to my residence (might that be the source?)

At any rate I am choosing to just close the close button, and the page is removed and I move on into using my computer, otherwise undisturbed.

Truly appreciate the efforts of other message board members. Thank you, and I hope this reply gives

other non-sophisticated participants another option.

Reply

Answer 5

macjack

Level 10

111,242 points

Aug 24, 2018 8:37 AM in response to allan299

It's not coming from Apple, it's a redirect and a scam.

Reply

Answer 6

macjack

Level 10

111,242 points

Aug 24, 2018 8:46 AM in response to allan299

A redirect is when your browser automatically sends you to a location you did not want.

The site you reference has nothing to do with Apple.

Reply

Answer 7

allan299 Author

Level 1

60 points

Aug 24, 2018 8:45 AM in response to allan299

You suggested: If the problem persists then download and run Malwarebytes.

I ran Malwarebytes and the scan indicated that there were no problems.

Since the window used my modem SSID number as part of the presentation,

I did a network diagnostic that Apple provides at the wifi icon on the main menu

bar of my MacBook Air, and it indicated that there were no problems.

I have emptied the cache including the databases stored. What in the cache

would let this situation happen?

Reply

Answer 8

Eric Root

Level 10

685,269 points

Aug 24, 2018 11:56 AM in response to allan299

If you click a link and it doesn't take you where you expected to go, that is a redirect as macjack posted. You need to use common sense as there is no other warning.

Safari/Browsers - Eliminating browser redirects and advertisements

Safari/Browsers - Eliminating browser redirects and advertisements (2)

Reply