Wikipedia:Reference desk/Archives/Computing/2021 September 26

= September 26 =

new.7ucs.biz
While I was surfing the Internet on my Samsung Galaxy J7 phone, I got a message that said that it was new.7ucs.biz, and that my phone was infected by viruses, and that I needed to click OK to scan for and remove the viruses. This is almost certainly malware masquerading as anti-malware. There have been other similar exploits in the past. I restarted the phone. I then got the same message, and it then started displaying a progress bar and said that it was scanning. Of course I have no idea what it was actually doing. I restarted the phone again. A Google search on new.7ucs.biz doesn't find anything, so either this is new malware, or malware that generates a string randomly. The domain 7ucs.biz does exist, and the whois on it says only that it has a registrar and name servers, and that everything else is hidden.

Does anyone know anything about this? Also, is there a forum or archive to report this to? 25 years ago, the Usenet group NANAS was the archive to report malware to. 15 years ago, NANAS was the archive to report malware to. Robert McClenon (talk) 02:31, 23 September 2021 (UTC)


 * If a notification like that randomly pops up, then your phone is already infected. I would suggest trying a factory reset of your phone if you don't have much to lose. You are most likely correct on it being malware pretending to be an antivirus. ― Blaze The WolfTalkBlaze Wolf#6545 18:06, 29 September 2021 (UTC)
 * User:Blaze The Wolf - It doesn't pop up randomly. It pops up when I am viewing news on a news site that has ads.  A few months ago, I had a similar problem with an entirely different message, but I encountered it in the same way, by viewing news that had ads.  It only pops up then, so I am more inclined to think that the ad is infected.  It doesn't pop up on my phone when I am doing anything else, and hasn't popped up in the last six days.  I didn't provide that detail in my previous report, and in retrospect, maybe I should have, because it may be a key detail.  Robert McClenon (talk) 04:57, 30 September 2021 (UTC)
 * Ah ok. If it's an ad then that makes more sense. You made it seem like it just randomly came up. There's a chance the ad was infected or that was the ad itself. ― Blaze The WolfTalkBlaze Wolf#6545 12:58, 30 September 2021 (UTC)
 * User:Blaze the Wolf - I didn't say it came up randomly. I said I was surfing the Internet.  It is true that I didn't provide the detail.  Robert McClenon (talk) 21:21, 2 October 2021 (UTC)

Surprise Update
Now if I search on new.ucs7.biz I get hits on Wikipedia mirrors that have picked up this discussion of the site. That is sort of good, because it means that my concern about the malware are being recorded somewhere. Robert McClenon (talk) 02:27, 3 October 2021 (UTC)

"Email link" using Firefox 92.0.1 on macOS
Until recently, the Firefox File menu had a choice "Email link"; I could select my preferred mail app via Firefox's Preference > General > Applications by setting the mailto field to "Use GMail". This opened a browser tab with a https://mail.google.com url on a preloaded New Message. The choice "Email link" has been replaced by "Share", which offers a list of apps that does not include GMail; the only mail app on the list is Thunderbird. Does anyone know how to restore the former functionality? --Lambiam 22:07, 26 September 2021 (UTC)
 * maybe check for a "more.." option, or something similar within share link, that has other apps..or possibly updated your Firefox browser?. Gfigs (talk) 10:05, 27 September 2021 (UTC)