Spooky Malware

[Piyono]

Hey, SR, it's been a spell.

A friend of mine just sent me screenshots of Chrome running on her MacBook. You can see the notifications on the side. They just keep coming.
It seems as though she's picked up something nasty.

You see the notification at the top, which reads "remistrainew.club"?
When I search for that on Google or Duck Duck Go, all the results are scammer sites. Nothing legit.
I've seen this before, where searching a keyword that pops up returns only scammer sites and no real content.
But how can that be? Have scammers learned to game the google crawler? How are there no legit sources coming up?

More to the point, Does anyone know how to deal with this kind of hijack?

 

[Will Rickards]

Her router maybe compromised.
Wipe it all would be my suggestion, even the router.

 

[Stereodude]

More to the point, Does anyone know how to deal with this kind of hijack?

Nuke it from orbit just to be safe?

Oh, and it's SF...

 

[snowhiker]

Hey, SR, it's been a spell.

Welcome back. It's been almost a year!

Oh, and it's SF...

I've made that same mistake too. Thinking Storage Review and not Forum.

 

[LunarMist]

How can that be? I thought the Mac was impervious to the virus/maleware or is it contaminated by the Google?

 

[Stereodude]

How can that be? I thought the Mac was impervious to the virus/maleware or is it contaminated by the Google?

That's just what Apple and the fanbois want you to think.

 

[LunarMist]

So it is BS? I read that many of the Mac users don't service their own computers.

 

[Chewy509]

How can that be? I thought the Mac was impervious to the virus/maleware or is it contaminated by the Google?

@LM, I thought we had already covered this?

http://www.storageforum.net/forum/showthread.php/11342-Hacked#4

 

[LunarMist]

@LM, I thought we had already covered this?

http://www.storageforum.net/forum/showthread.php/11342-Hacked#4

Yeah, but I'm not serious.

 

[Chewy509]

Sorry, missed the sarcasm tag...

 

[anilvij]

It's not a hi-jack, may be the notification permission was taken while browsing a site where the pop-under got automatically approved, check that.