I use Devuan ASCII (~= Debian Stretch) on my desktop, with Firefox and Chromium as my browsers. As I came back to my computer today after a few hours of non-use, and loaded a new browser frame, suddenly I got an overlay with a suggestion to install an extension:
The Text Encoding entry on the menu is now grayed-out, which it shouldn't be. The same thing happens on other websites, including, say, DuckDuckGo.
I have not done anything meaningful with my browser or my machine over the past several hours (before which I did not experience this behavior). And still - this seems very much like a kind of a virus, or a virus "bootstrapper" which wants to get me to install the next phase part of the virus, with more privileges.
- Am I misinterpreting the situation?
- Is this a known virus/malware script/whatever you call it?
- How could it have gotten onto my system?
- Other than shutting down, how can I mitigate my exposure?
- How can I remove it?