Browser Hijacked Help

[WaterlooSunset]

I too just noticed this yesterday, which is when I think it started happening to most people. It was only happening on the Yahoo bookmark page for my phone. It happened once this morning at 8am but has not happened since then. My speculation is that they did something to fix it. My concern is first of all, the fact that it even happened. Secondly, was any information lifted from my phone? Passwords, etc.?

Also, the factory reset is clearly not good advice to fix this situation. I did that last night before ever even reading this board and it did nothing to rectify the problem.

Has anyone else noticed that the problem seems to have gone away today?

[Vinodis]

C'mon guys!
It is your ISP's Servers which got hijacked. Why blame Android?!

[kirizzle]

C'mon guys!
It is your ISP's Servers which got hijacked. Why blame Android?!

haha, maybe it was... but it's a huge security risk either way.

[benh57]

I doubt anything got 'hijacked'. It's probably just a bad popup window "ad" for anti-virus sw that interacts badly with the G1 browser. (ie, accidental)

I'd expect that from yahoo. However some people get this with google.com, which i would not expect.

[MobileMan]

Its the same thing on peoples computers. Its the Zlob trojan. If you click on any link on the pop ups page or in some cases the "close" button it still DL some of itself into your computer. Google Zlob. Now its hitting mobile browsers wow.

[Swervo]

C'mon guys!
It is your ISP's Servers which got hijacked. Why blame Android?!

I would think that'd be the case if I was getting it with WiFi. Seeing as I was on 3G, and therefore using TMobile as my ISP, I'd like to think otherwise.

Also, as far as Zlob goes, it looks to me that it uses ActiveX and is a Win32 virus. That'd sorta prevent it from running on a Linux based OS while using a non-IE browser, wouldn't it?

After doing a bit more investigating, it sounds like it can poison your DNS by attempting to guess your router login, using a database of default login/password combinations, trusting that most people don't change their passwords. Again, this would only affect me if I was using WiFi and not on 3G, not the other way around as it is right now. Also, my router does not use the default password.

I wonder if any of TMobile's routers got compromised.

[kgirl17]

I found a place to post the problem on google last night. (Here's the chopped up url if you wanna see -- yea I know, I need tiny url)

http://www.google.com/support/forum/...045c7c055790e9

Anyway - they've written twice today but no other info.
I am quite annoyed that it wasn't taken more seriously. Almost seems like someone trying to make a point of how easy it is to hack the phones (or phone servers). And, apparently, it IS easy!!!

I'm curious - those of you who experienced this -- was google or yahoo (whichever caused you the problem) set as your HOME PAGE before the problem started? Or did you just type in the URL and hit it?

[peachymomo]

i had the same issue last night when i tried to access yahoo through my bookmarks and by typing in the url and i got the same message everytime. i deleted my cache and cookies and cleared my browser history and still had the same issue. i didn't click on the link because i didn't think you could download stuff like that. i finally clicked menu then went to downloads and cleared that out and the message went away. i haven't noticed any issues since then. i only have shopsavy, solitaire. isafe, college football, music, and movies downloaded. i don't go to that many sites. it is a little scary and i do hope nothing was put in my g1 and this needs to get fixed.

[djkdawg]

i havent ran into the problem, plus yahoo.com sucks anyways its all about google baby!!!

[Swervo]

I found a place to post the problem on google last night. (Here's the chopped up url if you wanna see -- yea I know, I need tiny url)

http://www.google.com/support/forum/...045c7c055790e9

Anyway - they've written twice today but no other info.
I am quite annoyed that it wasn't taken more seriously. Almost seems like someone trying to make a point of how easy it is to hack the phones (or phone servers). And, apparently, it IS easy!!!

I'm curious - those of you who experienced this -- was google or yahoo (whichever caused you the problem) set as your HOME PAGE before the problem started? Or did you just type in the URL and hit it?

I'm not sure offhand what my home page is, it's the default, so presumably Google. I only had this problem when using a bookmark to get to the page.