Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: 129260 on August 21, 2013, 02:27:10 AM

Title: Accessing mail.yahoo.com causes a phishing alert
Post by: 129260 on August 21, 2013, 02:27:10 AM

Found this:

http://forum.avast.com/index.php?topic=132441.0

Do not go to the site in the subject line. This is a valid block.

Not a False positive.

Just like the title says.
When assessing the site you get the warning that is a phishing site.

Please update your def. files.

This is with the latest updates.

*Note:
You can currently access the site by adding this site to the trusted domain list. Keep in mind once this is added, there is no way to currently remove it.
There is currently no option to manage this listing, which should be in a future update.

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Secondmineboy on August 21, 2013, 02:36:19 AM

I am getting no Alert at my end with the actual Beta of Avast 2014. This was already discussed here:

http://forum.avast.com/index.php?topic=132500.msg976752#msg976752

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: 129260 on August 21, 2013, 03:10:49 AM

Thanks. Found this:

http://forum.avast.com/index.php?topic=132441.0

Do not go to the site in the subject line. This is a valid block.

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Last1 on August 21, 2013, 05:27:07 AM

I am having the same problem.

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Last1 on August 21, 2013, 05:31:22 AM

Quote from: 129260 on August 21, 2013, 03:10:49 AM

Thanks. Found this:

http://forum.avast.com/index.php?topic=132441.0

Do not go to the site in the subject line. This is a valid block.

Which site?

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: dheineke on August 21, 2013, 09:55:58 AM

Quote from: Last1 on August 21, 2013, 05:31:22 AM

Which site?

the site: mail.yahoo.com - which when you need to sign in, it redirects you to a page at login.yahoo.com

I think it is a false positive and not a phishing site.
How can it be a phishing site?  It is actually a yahoo server.  And I have a SiteKey setup on my yahoo account (a picture I uploaded)  that the page does display when I go there and the cookie for it is present in my browser.
Unless yahoo's servers themselves are compromised.
What other explanations are there?

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Last1 on August 21, 2013, 02:57:12 PM

I have this alert on two computers. My friends are also having the same alert.
Could someone try the following steps out to reproduce the alert?
1- Clear Firefox history.
2- make sure that the avast plugin is enabled.
3- Enter mail.yahoo.com at the address bar (not from a link)
Does it show a phishing alert?

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: GTX66 on August 21, 2013, 03:00:20 PM

What it is flagging for me is the add on (Yahoo Mail Notifier 1.05) this is a false positive. I found it in the chest and restored it to the exclusion list.

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Secondmineboy on August 21, 2013, 11:28:48 PM

GTX66: You can report the file as false positive if you right click on the file in the chest and choose
send to virus lab, there you can choose false positive. :D

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Last1 on August 22, 2013, 05:47:06 PM

I have this alert on firefox and chrome. IE 10 crashes when visiting mail.yahoo.com. disabling the Avast plugin fixes everything!

Title: Re: Accessing mail.yahoo.com causes a phishing alert
Post by: Last1 on August 23, 2013, 04:09:12 PM

Quote from: Last1 on August 21, 2013, 02:57:12 PM

Could someone try the following steps out to reproduce the alert?
1- Clear Firefox history.
2- make sure that the avast plugin is enabled.
3- Enter mail.yahoo.com at the address bar (not from a link)
Does it show a phishing alert?

Did anyone try this to replicate the alert?