Has my ISP been hacked?

[saladdays]

Have a look at these screen grabs from my Windows laptop, Firefox browser on mumsnet.com

and my Android phone on dailymail.co.uk

On several occasions I've been reading a website and without me clicking on anything these messages just appear. Why are Euros mentioned? Not pounds? Help!

[Harpoon]

Getting two devices both infected would be unlucky (but possible), so I wonder if your router has been compromised / exploited.

Who is your ISP? What make / model of router do you have and how old is it?

[essayer]

Suspect it's one of Mumsnet's advertisers doing something dodgy and Mumsnet aren't doing anything about it

https://www.mumsnet.com/talk/site_stuff/4672139-ke...

[Captain_Morgan]

What security measures do you already have in place?

[saladdays]

My ISP is BT. I have the latest BT router with default security settings.

[Harpoon]

essayer said:

Suspect it's one of Mumsnet's advertisers doing something dodgy and Mumsnet aren't doing anything about it

https://www.mumsnet.com/talk/site_stuff/4672139-ke...

Ah, I didn't realise both screenshots were from Mumsnet, so I've go with the above...

[maccboy]

Does your phone show the same if you switch its wifi connection off and just use 4g/5g?

[essayer]

Harpoon said:

Ah, I didn't realise both screenshots were from Mumsnet, so I've go with the above...

actually the second is from dailymail but it'll probably be the same advertiser/network in both cases..

[saladdays]

The messages appear about once a month. But it looks like hackers are inside mumsnet and have been for since November.

[Harpoon]

saladdays said:

The messages appear about once a month. But it looks like hackers are inside mumsnet and have been for since November.

Mumsnet (and lots of other sites) have adverts served by third party providers. Hack or get a dodgy advert (which has code to generate the pop-up) and you can end up with pop-ups without the site you are visiting being hacked.

[sunbeam alpine]

Has happened on here in the past as well, although not frequently.

[Captain_Morgan]

saladdays said:

My ISP is BT. I have the latest BT router with default security settings.

Perhaps you may want to consider additional security on your computer & mobile devices?

[Hanslow]

Do an online search (if you can) for : luckypuppy popup

You'll find a number of results explaining what it is and how to mitigate against it from the user side, assuming it's not on the host side.

[mmm-five]

...and install a decent adblocker (or use Brave)!

[boxedin]

Captain_Morgan said:

saladdays said:

My ISP is BT. I have the latest BT router with default security settings.

Perhaps you may want to consider additional security on your computer & mobile devices?

BT do have 'form':

https://en.wikipedia.org/wiki/Phorm#BT_trials