"URGENT GOOGLE CHROME UPDATE" Redirected from YAHOO? Wtf?

system · 2016-11-30T20:20:09.000Z

Ok, I’ve seen this before a long time back, but this struck me as very unusual. I was redirected to this from answers.yahoo.com (as the base-URL - I was simply idling on a question on there and clicked back to Chrome and found myself redirected; upon clicking ‘back’, it went right back to Y!A) - A seemingly perfectly legitimate site, which I use all the time. In fact, both of my main emails are Yahoo. I can understand being redirected to something like this from a random no-namer site, but this is somewhat concerning to me, as most of my online accounts for just about anything are linked to my Yahoo emails.

Of course I didn’t open it, but I downloaded it just to scan it with Virus Total, because I couldn’t believe I was just redirected to this from Yahoo. Sure enough tons of matches to a trojan. Of course, Avast picked up nothing unusual. THAT’S not unusual.

But, does this indicate that Yahoo has potentially been infected/hacked and is now unsafe?

The variables which are not variables here:

I have no extensions or add-ons whatsoever.
My computer is always in lockdown mode - 2 firewalls, every single program secured to the max, both in file execution and internet access, and I scan every day for viruses, spyware and malware.
Every single file that’s ever been executed on this system has been scanned through Virus Total FIRST, and come back with 0 results and 0 negative ratings by users.

In other words, it wasn’t something that was on my end - this had to have been Yahoo. I’m in disbelief, but wouldn’t you agree?

Eddy · 2016-11-30T20:22:26.000Z

answers.yahoo.com doesn’t redirect.

system · 2016-11-30T20:27:27.000Z

Eddy post:2:

answers.yahoo.com doesn’t redirect.

It wasn’t instantaneous. It was after idling on the site for some time, on a question. answers.yahoo.com was the base URL, as to say: it wasn’t a “fake version” of Yahoo, but their actual site indeed.

polonus · 2016-11-30T22:36:09.000Z

This sounds like it could be recent be adware via javascript.
Were you asked to install an additional extension in Google Chrome by the name of Veritasi?

polonus

Announcements