It's only pages 1 & 3 of that thread that has the popup.
I suspect a hotlinked image/smilie is the cause and probably it unintentional by the user, it's just that the site hosting the hotlinked image has been compromised.
Funnily enough, that thread has already been sanitised once by CCIP.