Virus scam appearing only when on Mumsnet

[Puzzledandpissedoff]

Just wondering if anyone else has had this?
As in the title I'm getting frequent "warnings", supposedly from McAfee, claiming I've got various viruses and inviting me to click a link (not done of course)

I don't use McAfee anyway and they're not from them - their site has images of a common scam which matches these - but it only happens when I'm clicked onto Mumsnet

Anyone know what's happening by any chance?

Another one today, while browsing main talk menu.

kumpoaphy.com

Which like the other is registered through http://www.pananames.com

Win 11, Firefox, Livesafe

Yet anoher one's now appearing - 7 times just this morning from kumpoathy.com

Is there are progress on getting rid of these blasted things please @MNHQ?
We've all given the details you've asked for but it's still happening

I was getting these too (Firefox on laptop), a couple of weeks ago but thought it was my laptop! I reset it to restart as at 01 September and it stopped after that. Didn't take note of who or what was messaging as I was panicking too hard and didn't realise it was happening to others.

I was just refreshing a thread which has, apparently, been deleted (the one in AIBU about a man cooking for his teen daughter and her friends and overdoing it) and before I could click off it - redirected to this gem. Sort it out, @MNHQ. Still on Firefox, Win 11, with AVG virus protection.
Edited to say it won't let me post the image. The address starts with www.raipuneezuboaw.com

I've just logged in for the first time today and was looking at list of new threads on FWR. So just scaning down list, no clicking of mouse.

Taken to https://raipuneezuboaw.com which is 18+ web site.

This time back arrow worked but didn't return me to MN FWR index page but another web site. Was so cross I just closed the tab and forgot to see which one it was.

I'm not techy enough to understand, but how can a mouse pointed just moving over a page with links, where none have been clicked, take you to another web site?

(I didn't take a screen shot but see that preview shows that it is asking over 18s to take a survey - I think)

Just to say this has started to happen again in the past week.

So today I was just looking through list of notifications, and the same scam virus page popped up.

The web site claims to be https://hxn37afob.monster/ and was only registered this month through http://www.dynadot.com

But is already listed as a scam site.

So whether it is the same people constantly change web registration, still isn't clear why I only get this whilst on MN

yep getting this and porn

I haven't had it pop up again since installing an adblocker extension for Chrome.

It kills the ad revenue for MN, but if they're not concerned about the safety of the site for users then I'm not going to shed any tears over their lost revenue.

It's happening again.

This one just happened again.

Was just moving mouse to click on tab to close window I had opened to read posts on MN.

It definitely isn't about clicking on anything.

It seems to be when moving the mouse over the left pane of adverts (for me anyway).

I’ve just had the virus one pop up and take up my whole screen. I’m on an iPhone on safari. When I tried to click back to get to MN, I was instead taken to Walmart 🤷‍♀️ I was scrolling down on a thread when it appeared, I hadn’t clicked anything

Just got it again, screenshot attached. I was on a style and beauty thread about scarves, just scrolling down when it took over my screen

I keep getting the McAfee one too!

@HebeMumsnet if MN can't stop trojans in the ads, adblocker can stop them getting on my devices.

I'd prefer not to have to block your revenue. I will not leave my computer vulnerable to some body else's poor IT skills.

Sorry should have added I am on a Windows computer.

But also to add that when closing down my computer, I found that in fact I had 4 notifications saying my virus scan had blocked an attempt to get me to go to untrustworthing web sites.

Which I assume was caused by this fake virus website scam.

I had this for the first time yesterday - was so confused and immediately closed the web on my laptop (I don't use it on my phone).

Just happened again while I was typing a comment, so mouse not moving over any of the advert panes

Had it again the last two days on both laptops running Chrome and Firefox, the McAfee one on both. One laptop is running Adstop too. It was happening to me in October, then stopped and has now started again.

Install an ad blocker

Mumsnet has an issue with their advert provider. They are marking unsafe sites as safe, hence the ability to bypass anti-viral to an extent.

This may make the last data breech look like child's play.

Happened just now as I was reading this discussion. On iPhone ( not the app).
I have guard.io and it blocked scrolling down and gave warning.

@Vroomfondleswaistcoat , it got past your ad blocker?

Is Jeffery their new IT guy?

Ublock Origin Lite is working for me as an extension for Chrome, it's stopped these pop-ups completely. And it's free.

I wasn't going to name it because I now it will hurt the site revenue, but clearly MN aren't showing any concern so users should know the tools that work to protect them from the site's vulnerabilities.

Mumsnet has an issue with their advert provider. They are marking unsafe sites as safe, hence the ability to bypass anti-viral to an extent

If correct that would explain something I asked HQ about on a different thread, @NerdWhoEatsMedlar

I fully get why they need the revenue and it's why I've not so far got an ad blocker, but it beats me how scam sites can possibly be regarded as legitimate advertising

... it beats me how scam sites can possibly be regarded as legitimate advertising

Is that what they said?!

Isn't that the whole point of subscribing to scam spotter web sites?

@Puzzledandpissedoff I resisted an adblocker until the McAfee pop up tried to download an executable file.

DS and I have had a trawl around and decided MN is not a particularly safe site at the moment.
I've taken action at my end because they are not paying DS and I to take action at their end.