Disturbing Fake QR popup [SOLVED]

[Chris Pink]

A friend is getting a popup every time he goes to a field with a username that has what appears to be a fake QR Code - fake as in it keeps changing (animated) at a fast rate.

Malwarebytes doesn't twitch.

Anyone seen anything like this?

 

[chabig]

It looks fake. Tell him to stop going to that site.

 

[Chris Pink]

Apparently it's a Firefox extension called MYKI Authenticator which appears genuine although he claims no knowledge of installing it. As I say the QR code is weird in that it's animated at a fast rate