Top

About the Web Browser Pop-up Alert Scam

We've seen an increase in users reporting an issue with their web browsers (Safari, Chrome, or Firefox), where a pop-up alert window appears claiming their computer has been hijacked or has a "major security issue" — sometimes even displaying a phone number to call. This applies whether you're an Intego X9 or Intego ONE customer, since this is a browser-based scam, not a Mac or Windows infection.

Alert2.png
Alert1.png

What You Should Do If You See One of These Windows

It's important to understand: this is not a virus, and your computer has not been infected with malware. This is a scam. Do not call the phone number listed in the window, and don't spend any money or share personal information to get rid of the message. If you do call one of these numbers, you'll likely be asked to install remote-access software — which could genuinely compromise your computer.

Removing the Alert From Your Web Browser

If you see this message in your web browser, follow the instructions below to clear this threat:

1. Reset Your Browser

2. Force Quit and Restart Browser

3. Delete Safari Preferences Manually

4. What To Do If You Called the Phone Number

5. Protect Your Computer From Future Attacks

6. Contact Intego Support

1. Reset Your Browser

Safari: See How to Reset Your Safari Web Browser for current steps.

Chrome or Firefox:

2. Force Quit and Restart Your Browser

Force quit your browser using Command + Option + Escape, then relaunch it while holding the Shift key — this restarts the browser without reopening any previously open windows, including the scam pop-up.

Force_Quit.png

3. Delete Safari Preferences Manually (If Steps 1–2 Don't Work)

  1. In Finder, select Go > Go to Folder…
Go_Menu.png
  1. Enter the following exactly as listed below (or copy-paste): ~/Library/Preferences
GoToFolder.png
  1. Locate com.apple.Safari.plist and move it to the Trash.
  2. Restart your Mac and reopen Safari. 
  3. If the pop-up still appears, repeat the process with ~/Library/Saved Application State locate com.apple.safari.savedState, and move it to the Trash. Restart again.

4. What to Do If You Called the Phone Number

If you called one of these numbers and allowed remote access to your computer:

  1. Contact your bank or credit card company immediately to dispute any related charges as fraudulent, and monitor your account for unusual activity.
  2. Restore your computer from a backup:

Don't have a backup? There's no reliable way to know exactly what changed if you granted remote access. The most secure option is to erase your Mac entirely and start fresh. This will erase all data on your Mac.

Erase and Reinstall macOS

5. Protect Your Computer From Future Attacks

A layered security approach is the best defense against scams like this one:

  • Intego ONE customers: Make sure your Firewall and Real-Time Protection are active 
  • New to Intego, and on a Mac? We recommend Intego ONE, which combines Antivirus, Firewall, SmartClean, and VPN in one app.
  • New to Intego, and on Windows? Intego X9 for Windows is available for purchase — note that Intego X9 is no longer sold for macOS.

6. Contact Intego Support

If you encounter ransomware or a related file, send it to our Virus Detection Team for analysis. For any other questions or concerns, contact Intego Support.

Have more questions? Submit a request