New kind of ‘Congratulations’ pop-up ad could hide something more sinister