Hacker takeover via Google search

Perhaps you have been unexpectedly manipulated into adding an additional Calendar to your device - and this rogue Calendar is exposing unwanted calendar or triggering unexpected alerts/reminders. 

To check for an unexpected Calendar source, open the Calendar App - and expose the sidebar:

Within the open sidebar, beneath Other, look for a Calendar that shouldn’t be in the list; an unexpected Calendar, if found, may be the source of unexpected messages/alerts. If you find a suspect Calendar, disable or delete it; this should resolve the problem in its entirety.

In more detail...

So good is iPadOS/iOS at protecting us from malware, Threat Actors have become very creative. As defences improve across many computing systems, a high proportion of threat now has to rely upon Social Engineering - tricking the user, one way or the other, into installing some kind of seemingly innocuous payload onto our devices - or in fooling us into exposing private or sensitive data that can be used to commit identity theft, fraud or otherwise attempt extortion or related activity.

As iOS sandboxing is so effective at protecting us from risk, one of the increasingly common methods of “infecting” our devices (I use this term in the loosest possible sense) is to create web-content, that when clicked, simply subscribes a Calendar to your system; this, of itself, is a completely valid/permitted system operation; as the “subscribing” action itself contains no malicious payload or direct exploit.

Once this calendar is subscribed (and automatically enabled), the Calendar events themselves effectively schedule appearance of unwanted “content” and notifications - often with embedded URLs that, when activated, present material that attempts further social engineering attacks from your browser. Likewise, legitimate actions can be triggered and automated within the security boundaries enforced by the OS. If other App Utilities are present on your device, these can also be triggered to aid automation of data exfiltration from your device. 

As you may now have discovered, unless you know what to look for, the subscribed Calendar isn’t immediately obvious to many users - any more than the method by which its installation is triggered. Deletion of individual events isn’t possible, but once you know what to look for, recognition and removal of this exploit vector is relatively straightforward.

Not possible. There is no known method or way of remotely accessing an iPad, much less over a google search.

Whatever message you received is almost certainly a scam.

If you explain exactly what is happening or what issues you are still encountering after resetting everything, and what exactly you actually reset, we may be able to offer advice on a course of action.

You got an ad designed to scare you into buying useless software.

The right thing to do would be ignore it, close the window.

A website cannot scan your device or detect anything.