Is Lucky Mobile a scam?

Forums › Vodafone New Zealand (including Vodafone, WxC, Farmside) › Is Lucky Mobile a scam?

Geektastic

14446 posts

Uber Geek

Trusted

Lifetime subscriber

#251190 12-Jun-2019 15:36

Recently when browsing on my VF connection I get interrupted by a VF branded page claiming to offer free stuff to VF subscribers.

It has the odour of a scam for sure and if it isn't one, VF really ought to consider the optics.

1 | 2

687 posts

Ultimate Geek

Subscriber

#2256853 12-Jun-2019 15:45

Interesting. I had the same experience a few days ago. But it did seem clear(?) that it was not VF behind the popup. Scam written all over it.

Linux

6264 posts

Uber Geek

Trusted

Lifetime subscriber

#2256879 12-Jun-2019 16:05

Yes SCAM!

freitasm

BDFL - Memuneh
67081 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#2256882 12-Jun-2019 16:15

I'd say they are just using the IP address to identify which ISP you are using and putting a message there to make it look like Vodafone. If you were on 2degrees the message would say 2degrees instead.

Likely your computer is infected with malware, or your router or something else. Remember this thread - the user had port forward set to his cameras, which were all infected with malware and causing problems in the network.

richms

23281 posts

Uber Geek

Trusted

Subscriber

#2256954 12-Jun-2019 18:53

There is a wordpress thing going around injecting spammy stuff into crap unmaintained wordpress installations. Probably just the site you are viewing is negligent or accepts ads from equally negligent places.

Richard rich.ms

Geektastic

14446 posts

Uber Geek

Trusted

Lifetime subscriber

#2256997 12-Jun-2019 20:06

freitasm:
I'd say they are just using the IP address to identify which ISP you are using and putting a message there to make it look like Vodafone. If you were on 2degrees the message would say 2degrees instead.

Likely your computer is infected with malware, or your router or something else. Remember this thread - the user had port forward set to his cameras, which were all infected with malware and causing itproblems in the network.

It only happens on my Galaxy S10+.

And happens on 4G.

sbiddle

28951 posts

Uber Geek

Moderator

Trusted

Biddle Corp

Lifetime subscriber

#2257024 12-Jun-2019 20:31

I've had the same thing happen a few times recently on my phone browing legit sites.

mentalinc

1937 posts

Uber Geek

Trusted

#2257053 12-Jun-2019 21:13

also had the same thing happen every now and again but only on one legit site. Assume it's just something getting through the normal ad networks.

click close and carry on.

CPU: Intel 3770k| RAM: F3-2400C10D-16GTX G.Skill Trident X |MB: Gigabyte Z77X-UD5H-WB | GFX: GV-N660OC-2GD gv-n660oc-2gd GeForce GTX 660 | Monitor: Qnix 27" 2560x1440

Oblivian

3822 posts

Uber Geek

#2257092 12-Jun-2019 23:28

Geektastic:
freitasm:

I'd say they are just using the IP address to identify which ISP you are using and putting a message there to make it look like Vodafone. If you were on 2degrees the message would say 2degrees instead.

Likely your computer is infected with malware, or your router or something else. Remember this thread - the user had port forward set to his cameras, which were all infected with malware and causing itproblems in the network.

It only happens on my Galaxy S10+.

And happens on 4G.

Have a squirt at this, and it will likely identify one of the apps with introusive ads that run background

https://play.google.com/store/apps/details?id=com.denper.addonsdetector&hl=en

Lorenceo

835 posts

Ultimate Geek

Trusted

#2257256 13-Jun-2019 09:57

I've had this happen as well, although on Spark. It just appeared as a pop up while browsing. I took a screenshot, but didn't open any of the links it wanted me to.

MichaelNZ

Linux Systems Admin
1173 posts

Uber Geek

Trusted

Integrity Tech Solutions

Subscriber

#2257276 13-Jun-2019 11:06

Lorenceo:

I've had this happen as well, although on Spark. It just appeared as a pop up while browsing. I took a screenshot, but didn't open any of the links it wanted me to.

Totally irreelvant to this thread, but I once received a call from Telecom to advise me I had won a motorbike. I had never entered any competition so I was naturally doubtful.

In due course I confirmed the legitimacy of the prize with them and the motorbike was delivered.

Unfortunately, it needed a motorbike licence which i didn't have at the time so I sold it.

Integrity Tech Solutions @ Norsewood, New Zealand

freitasm

BDFL - Memuneh
67081 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#2257284 13-Jun-2019 11:21

Ok, looking at this I'd say a site you visited was compromised. This happens a lot with some sites not being automatically updated or the company not applying security updates as they are available.

I found a similar problem about nine months ago - a Wellington-based cafe website, all works fine if visited directly, but if you search it in Google and then click the link it will show a similar spammy page. I notified the owners via their contact form and personally when I visited the cafe. It was obviously never fixed because nine months later, I opened an incognito browser, search for it and got the same... Some people will never learn.

richms

23281 posts

Uber Geek

Trusted

Subscriber

#2257303 13-Jun-2019 11:35

freitasm:

Ok, looking at this I'd say a site you visited was compromised. This happens a lot with some sites not being automatically updated or the company not applying security updates as they are available.

I found a similar problem about nine months ago - a Wellington-based cafe website, all works fine if visited directly, but if you search it in Google and then click the link it will show a similar spammy page. I notified the owners via their contact form and personally when I visited the cafe. It was obviously never fixed because nine months later, I opened an incognito browser, search for it and got the same... Some people will never learn.

I generally just report them as a malware site using the google thingie. Perhaps when they get blocked from search results they will sort it out?

Richard rich.ms

freitasm

BDFL - Memuneh
67081 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#2257307 13-Jun-2019 11:42

richms:

freitasm:

Ok, looking at this I'd say a site you visited was compromised. This happens a lot with some sites not being automatically updated or the company not applying security updates as they are available.

I found a similar problem about nine months ago - a Wellington-based cafe website, all works fine if visited directly, but if you search it in Google and then click the link it will show a similar spammy page. I notified the owners via their contact form and personally when I visited the cafe. It was obviously never fixed because nine months later, I opened an incognito browser, search for it and got the same... Some people will never learn.

I generally just report them as a malware site using the google thingie. Perhaps when they get blocked from search results they will sort it out?

I doubt they would even realise traffic stopped coming from Google search results...