The ‘Your device is under threat’ pop-ups are part of an online tactic, which is hosted on nearly a hundred domains that might be brought to your Web Browser via low-quality advertising campaigns currently. The purpose of these pop-ups is to trick the users into thinking that their computers are in danger, and they need to contact experienced computer experts who will help them eliminate the threat and protect their data. To make the hoax sound more believable, its authors may use various tricks – fake Blue Screens of Death, fake audio recordings playing in the background, fake anti-malware scanning animations, and other similar techniques. The common thing that most of the ‘Your device is under threat’ pop-ups have in common is that they all urge the user to call a specific number for help – 844-384-6777. The first domain we noticed the’Your device is under threat’ pop-ups on is hxxp://akrons[.]xyz/, but we discovered quickly that this operation is carried out on a larger scale:

agogls[.]xyz, andois[.]xyz, kalors[.]xyz, kemts[.]xyz, krodis[.]xyz, olegas[.]xyz, rekods[.]xyz, akrons[.]xyz, alrons[.]xyz, kalks[.]xyz, kdrons[.]xyz, kronds[.]xyz, , airnds[.]xyz, akaks[.]xyz, alopns[.]xyz, kreons[.]xyz, rentors[.]xyz, kilosps[.]xyz, krongs[.]xyz, knors[.]xyz, aknos[.]xyz, deips[.]xyz, dronis[.]xyz, kojis[.]xyz, konis[.]xyz, koros[.]xyz, landswemrealty[.]com, , wintos[.]xyz, gaglis[.]xyz, , kiloks[.]xyz, kornis[.]xyz, morningskatepod[.]com, kalkos[.]xyz, , kealos[.]xyz, kekols[.]xyz, kermos[.]xyz, ktors[.]xyz, , kaklos[.]xyz, kakros[.]xyz, , kolors[.]xyz, renkos[.]xyz, derons[.]xyz, keois[.]xyz, , kworls[.]xyz, denros[.]xyz, kalits[.]xyz, , kernds[.]xyz, kervs[.]xyz, , korms[.]xyz, kalist[.]xyz, , kerafs[.]xyz, kralos[.]xyz, kwels[.]xyz, abors[.]xyz, ajnls[.]xyz, anikols[.]xyz, anils[.]xyz, autins[.]xyz, kemors[.]xyz, kenosm[.]xyz, melots[.]xyz, abilos[.]xyz, abros[.]xyz, alovns[.]xyz, anilos[.]xyz, aronds[.]xyz, latons[.]xyz, abufs[.]xyz, aklans[.]xyz, albas[.]xyz, amips[.]xyz, amonfs[.]xyz, azlam[.]xyz, akroms[.]xyz, alibas[.]xyz, alvios[.]xyz, aronis[.]xyz, akrao[.]xyz, alhads[.]xyz, alvino[.]xyz, amola[.]xyz, amontis[.]xyz, azarko[.]xyz, anerts[.]xyz, aopils[.]xyz, apitis[.]xyz, aplios[.]xyz.

All of these domains host a different variation of the ‘Your device is under threat’ pop-ups, and some of them may use additional fake warnings and alerts to seem different and legitimate. The best way to protect yourself from technical support tactics like this one is to remember that browser pop-ups and random websites are never a reliable source of information regarding your computer’s health and security. Furthermore, you should never trust alerts and warnings that ask you to contact a specific phone number, which does not seem to be linked to a reputable company.

The good news is that the ‘Your device is under threat’ pop-ups are not linked to threats so that seeing them in your Web browser is very unlikely to be a symptom of problems. However, it is still recommended to run an anti-virus scanning tool to ensure that there’s no harmful software present on the computer.
[template:aliases][template:removal][template:technical_title][template:files][template:registry][template:additional]