As they note, the pop-ups are "app-modal" and cause the browser's JavaScript engine to pause until a user response is obtained. Hence, they can be abused by ransomware and scareware scammers.

I recently wrote a column on how to open a dialog box in an ASP.NET MVC application. In that column, I had the HTML for the dialog box dynamically generated at runtime from a Partial View and ...