Given the subject a title and the way this thread will persist 'possible hack' and the date would have been handy in the header. I had a drive by popup two days ago, but like defragster when I couldn't get it to trigger again I assumed it had come from some other tab. Looks like somebody has got cunning on just when it shows up.