Fake AT&T Wireless REWARDS Popup Virus Ad

at&t-wireless-rewards-scam-screen1

For several months, every now and then I have been getting the above pop up ad on my Samsung Android S5 which says; “MESSAGE! Congratulations AT&T Wireless user, you have been chosen for a chance to get a new iPhone 6s, MacBook Pro or iPad“.

There is no other choice given other than to click the OK button and no way to remove the ad other than to click the OK button, then you are taken to the next screen (below) which gives you questions to answer.

1.The ad is fraudulent & a SCAM because they are claiming it’s by AT&T Wireless when it clearly is not.

2. The adware was installed on my phone without my knowledge or permission with no way given to remove it.  That is also illegal.

3. The adware illegally hijacks my phone and prevents me from being able to leave the page.

4. The ad forces you to click to OK button or it keeps your phone’s browser page hostage.

at&t-wireless-rewards-scam-screen2

I decided to go along with this and answer the questions to find out what the object was and who is responsible.  After I pressed the “Do Not Know” button the screen below appeared.

at&t-wireless-rewards-scam-screen3

Top part of screen

at&t-wireless-rewards-scam-screen4

This is the bottom of the screen. I pressed the “Reserve Now”button and the screen below appeared.

screen5

Now we can see that this is what’s called a CPA (Cost Per Action) offer possibly being promoted by an affiliate who has figured out a way to infect people’s computers with a malware virus designed to hijack people’s cell phone browser.  If you were to continue and enter your email address he may be paid a buck or 2 for each email entry.  It’s possible he could be making hundreds or thousands of dollars a day.

There are several complaints about this but no solutions I can find on how to remove this.

Here’s some of the complaints;

https://www.reddit.com/r/iphone/comments/49o9d8/hijack_popup_in_facebook_and_other_web/

https://forums.att.com/t5/AT-T-Internet-Email-Security/Popup-AT-amp-T-Survey-Scam/td-p/4258431

Action Taken on 10-2-2016:

I found the URL of the ad to be; https://s3.amazonaws.com/newsandpromos/mobile/C3KWabg3Wgar7sQW7bRFebTi.html?sid=8 and filed a complaint to abuse@amazonaws.com.

It appears that the fake AT&T Wireless Rewards site has been disabled because when you visit the above link, there’s a “Reported Web Forgery” notice.

I also sent all of the evidence I collected including the screen shots above to AT&T Wireless at scam@abuse-att.net

This should be the end of this problem as of 10-3-2016.

Save

Save

Save

Save

Save

Save

Save

Save

Save

Save

Save

Save

Save

Save