Home Malware Programs Adware 'RDN_YahLover.worm' Pop-ups

'RDN_YahLover.worm' Pop-ups

Posted: June 12, 2017

Threat Metric

Threat Level: 8/10
Infected PCs: 869
First Seen: June 12, 2017
Last Seen: July 11, 2023
OS(es) Affected: Windows

The 'RDN_YahLover.worm' pop-ups (or 'RDN_YahLover.worm!!055BCCAC9FEC' Pop-Ups) are corrupted messages, which may lock the users' Web browser and prevent them from loading other pages unless they restart their Web browsing client completely. Seeing these pop-ups for the first time can be a rather a scary experience because they state that the users' computers are infected with a threat, and their browsing history, passwords, and credit card information might get collected by cyber crooks. The good news is that this information is fake, but the bad news is that the pages hosting the 'RDN_YahLover.worm' pop-ups are part of a tactic that many users have fallen for. The purpose of technical support tactics like this one is to convince users that they need the help of certified support agents who can be reached by calling the number featured in the 'RDN_YahLover.worm' pop-ups. Different versions of the tactic might use different numbers, and they may be hosted on different domains, but in the end, they may end up asking the users to do the same thing – spend their hard-earned money on overpriced services or products whose credibility is questionable.

Researchers note that the 'RDN_YahLover.worm' pop-ups may be found on many websites, and they may be accompanied by varying phone lines. Here are some of the pairs that we have come across:

  • 844-592-9882 and web-alrt-phsng-atck.xyz
  • 888-373-0151 and warningalert.xyz
  • 888-308-4565 and pc-failure-394j5hs.info
  • 888-506-2142 and fd-ht-27.s3.amazonaws.com
  • google-mirror.com
  • clicksads.club

Whenever you see Web browser pop-ups or alerts, which urge you to contact a technical support team because your online safety is in danger, you should ignore them. Web browser pop-ups are not a reliable source of information, and pages claiming to provide you with security details about your system are not to be trusted. The 'RDN_YahLover.worm' pop-ups may not be linked to threats so that they can be removed by simply avoiding to visit the website that spawned them in the first place.

Loading...