VIRUS ALERT FROM APPLE POP-UP Scam (Mac)

What is "VIRUS ALERT FROM APPLE"?

"VIRUS ALERT TO APPLE" is another fake error message delivered by various rogue websites. As a rule, users visit these sites inadvertently - they are redirected by unwanted applications (PUAs) or intrusive advertisements displayed on other deceptive sites.

Research shows that unwanted apps typically infiltrate systems without permission and, as well as causing redirects, deliver rogue ads and gather information relating to browsing activity.

This error message states that the system has been blocked due to the following reasons: the Mac registration key is illegal; pirated software being is used; the computer is proliferating viruses; the system is hacked or being used from an undefined location. The rogue site is also designed to automatically download a file called "This is a VIRUS.You computer is blocked".

The file is continually re-downloaded the entire time users visit the website. Fortunately, this file is harmless and you can delete it without worrying. The error message encourages users to contact Apple's tech support via a telephone number ("+86672265620") provided. "Certified technicians" then supposedly resolve all issues.

Be aware, however, that the "VIRUS ALERT TO APPLE" error is fake and Apple is certainly not involved in this scam. Cyber criminals generate revenue by scaring and tricking gullible users into calling the aforementioned telephone number and paying for services that are not needed.

Therefore, ignore "VIRUS ALERT TO APPLE" and never attempt to call the aforementioned telephone number. You can remove this error simply by leaving the deceptive site. Note that some rogue sites employ scripts that disable closing of browsing tabs/windows.

In these cases, terminate the browser using Activity Monitor or simply reboot the system. Do not restore previous browsing session, otherwise malicious sites are reopened.

Potentially unwanted applications gather various information about browsing activity. The list of collected data types typically includes (but is not limited to) keystrokes, URLs visited, pages viewed, search queries, Internet Protocol (IP) addresses, and geo-locations.

Recorded data usually contains personal information that is shared with third parties and misused to generate revenue. Therefore, having data-tracking apps installed on your computer might lead to serious privacy issues or even identity theft. Unwanted apps are also notorious for displaying intrusive advertisements.

They deliver coupon, banner, pop-up, and other similar ads using tools (e.g., "virtual layers") that enable placement of third party graphical content on any visited site.

Therefore, they conceal underlying content, thereby significantly diminishing the browsing experience. In addition, intrusive ads redirect to malicious websites and run scripts that download/install unwanted apps (or even high-risk viruses). Clicking them is risky and can result in computer infections. All potentially unwanted applications should be uninstalled immediately.

Threat Summary:

Name	"VIRUS ALERT FROM APPLE" virus
Threat Type	Scam, Mac malware, Mac virus
Related Domains	jungmong[.]cf
Serving IP Address (jungmong[.]cf)	167.99.234.72
Detection Names (jungmong[.]cf)	BitDefender (Malware), Fortinet (Phishing), Kaspersky (Malware), Full List (VirusTotal)
Symptoms	Your Mac became slower than normal, you see unwanted pop-up ads, you get redirected to shady websites.
Distribution methods	Deceptive pop-up ads, free software installers (bundling), fake flash player installers, torrent file downloads.
Damage	Internet browsing tracking (potential privacy issues), displaying of unwanted ads, redirects to shady websites, loss of private information.
Malware Removal (Mac)	To eliminate possible malware infections, scan your Mac with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner for Mac To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Many fake errors are virtually identical to "VIRUS ALERT FROM APPLE" including, for example, "Your Computer Is Permanently Blocked", "Your Registration Key Is Blocked", "Your Mac Might Be Infected!", "The Removal Of (3) Spyware Is Required", and so on.

They claim that the system is damaged (e.g., infected, missing files, or similar), however, errors such as "VIRUS ALERT TO APPLE" are designed only to extort money from unsuspecting users. Potentially unwanted applications also share many similarities.

By offering "useful features", they attempt to give the impression of legitimacy and trick users to install, however, unwanted apps typically have just one purpose: to generate revenue for the developers.

Most cause unwanted redirects, gather sensitive information, and deliver intrusive ads, thereby diminishing the browsing experience and posing direct threat to your privacy and browsing safety.

How did potentially unwanted applications install on my computer?

In some cases, potentially unwanted applications have official download websites, however, as mentioned above, most infiltrate systems without permission. Developers proliferate them via the aforementioned intrusive ads and a deceptive marketing method called "bundling" - stealth installation of unwanted apps together with regular software.

Developers are not honest enough to disclose installation of unwanted apps properly, and thus most are concealed within various sections (most likely "Custom" or "Advanced" settings) of the download/installation processes.

Furthermore, many users click advertisements and skip download/installation steps - behavior that often leads to inadvertent installation of unwanted apps. In this way, they expose their systems to risk of various infections and compromise their privacy.

How to avoid installation of potentially unwanted applications?

User are often responsible for system infections - lack of knowledge and careless behavior leads to problems. Caution is the key to computer safety. To prevent unwanted installations, be very cautious when browsing the internet and downloading/installing software.

Carefully analyze each step of the download/installation processes and cancel offers to download/install additional applications. Opt-out of third party software and decline offers to download/install them. We recommend that you avoid using third party downloaders, since developers monetize them by promoting rogue software.

Software should be downloaded from official sources only, using direct download links. Intrusive ads often seem legitimate, but they often redirect to dubious websites (gambling, pornography, and so on). If you experience these ads, check the list of installed programs/browser plug-ins and eliminate any suspicious entries.

If your computer is already infected with PUAs, we recommend running a scan with Combo Cleaner Antivirus for macOS to automatically eliminate the.

Text presented within "VIRUS ALERT FROM APPLE" pop-up:

VIRUS ALERT FROM APPLE
This computer is BLOCKED
Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The mac's registration key is illegal.
This mac is using pirated software.
This mac is sending virus over the internet.
This mac is hacked or used from undefined location.
We block this computer for your security.
Contact apple helpline to reactivate your computer.

BLOCKED

Apple Support Alert
Your System Detected Some unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +86672265620

Appearance of "VIRUS ALERT FROM APPLE" scam (GIF):

"VIRUS ALERT FROM APPLE" pop-up-displaying websites continually download a file called "This is a VIRUS.You computer is blocked":

Another variant of "VIRUS ALERT FROM APPLE" pop-up scam (the text in pop-up slightly differs and cyber criminals use different telephone number):

Text presented in the pop-up:

VIRUS ALERT FROM APPLE

This Mac computer is BLOCKED

Do not close this warning or restart your Mac
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the Internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.

Text presented in the background:

Apple Support Alert

Your System Detected Some Unusual Activity.

It might harm your Mac's data and track your financial activities.

Please report this activity to +1-855-550-6155

Appearance of this "VIRUS ALERT FROM APPLE" pop-up scam variant (GIF):

Another variant of "VIRUS ALERT FROM APPLE" pop-up scam:

Text presented within this site:

Pop-up window:

 

VIRUS ALERT FROM APPLE

This computer is BLOCKED

The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
Back to Safety

 

Website background:

 

Apple Support

Apple Security Tollfree:
+1-888-834-8756
 Prevent this page from creating additional dialogues.
Enter Apple registration key to unblock.
Enter key

Apple Support Alert
Your System Detect Some Unusual Activity
It might harm your computer data and track your financial activities.
Please report this activity to +1-888-834-8756

Yet another variant of "VIRUS ALERT FROM APPLE" pop-up scam:

Text presented within:

Main pop-up:

 

Apple protected your PC

Apple SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk. For technical support call on +1-(888)-341-9847.
Publisher: Unknown Publisher
App: Apple.app
Run anyway [Don't run]

Background pop-up:

 

VIRUS ALERT FROM APPLE

This Mac computer is BLOCKED

Do not close this warning or restart your Mac
Your Mac's registration key is Blocked.
Why we blocked your Mac Computer?
The Mac's registration key is illegal.
This Mac is using pirated software.
This Mac is sending virus over the internet.
This Mac is hacked or used from undefined location.
We block this Mac for your security.
Contact Apple helpline to reactivate your Mac.
Apple Security Tollfree: +1-(888)-341-9847

 

Background:

 

Apple Support Alert
Your System Detected Some Unusual Activity.
It might harm your computer data and track your financial activities.
Pleases report this activity to +1-(888)-341-9847
Ignore Alert Chat Now

Yet another variant of "VIRUS ALERT FROM APPLE" pop-up scam:

Text presented within:

Pop-up window:

 

VIRUS ALERT FROM APPLE

This computer is BLOCKED

Do not close this window and restart your computer
Your computer's registration key is Blocked.
Why we blocked your computer?
The window's registration key is illegal.
This window is using pirated software.
This window is sending virus over the internet.
This window is hacked or used from undefined location.
We block this computer for your security.
Contact Apple helpline to reactivate your computer.
Apple Security Tollfree:
+1-888-307-3210

Background:

 

Apple Security Tollfree:
+1-888-307-3210
Enter Apple Serial key to unblock.
ENTER KEY: [Submit]
Apple Support Alert
Your System Detected Some Unusual Activity.
It might harm your computer data and track your financial activities.
Pleases report this activity to +1-888-307-3210
Ignore Alert Chat Now

Instant automatic Mac malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of Mac malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner for Mac By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is "VIRUS ALERT FROM APPLE" virus?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for macOS.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for macOS) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

▼ Show Discussion