Avast WEBforum

Other => Viruses and worms => Topic started by: Mr.O on January 07, 2024, 12:26:40 PM

Title: Threat: URL:Phishing Continuous Abortion of Connection appearing every 10mins
Post by: Mr.O on January 07, 2024, 12:26:40 PM

Alert Message:

Threat secured
We've safely aborted connection on 91.108.56.148 because it was infected with URL:Phishing

Threat name: URL:Phishing
Threat type: Phishing - This is a scam designed to steal sensitive information like your credit card number, banking credentials, or passwords.
URL: http://91.108.56.148:80/api

Number of Occurrences: 19 (every 10mins)

Note: This type of alert is coming from Telegram.exe

Actions taken:
1. Completely uninstalled Telegram Desktop App
2. Reinstalled Telegram Desktop App

Results:
-Alerts still persisted to appear from the same URL

Any idea on what might be causing this alert? Thank you all in advanced.

Title: Re: Threat: URL:Phishing Continuous Abortion of Connection appearing every 10mins
Post by: Mr.O on January 07, 2024, 12:30:48 PM

Update:

Detection ID: ec7ce1a4d69c/2024-01-07T11:28:28.903Z

Title: Re: Threat: URL:Phishing Continuous Abortion of Connection appearing every 10mins
Post by: Pondus on January 07, 2024, 12:41:13 PM

https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

Title: Re: Threat: URL:Phishing Continuous Abortion of Connection appearing every 10mins
Post by: Mr.O on January 07, 2024, 12:49:24 PM

Hi. I already sent a report on the URL. Hopefully someone can tell me what is going on.