Author Topic: Website wrongly reported as phising  (Read 1839 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Website wrongly reported as phising
« on: November 25, 2018, 08:31:41 PM »
Hi all,
I work in ING Bank Spain and our transactional website ( https://ing.ingdirect.es/pfm/) was reported as phishing by your antivirus. This morning we reported a false positive using your webform and contacting your social media accounts, but nothing happened so far. Could you please review this and remove this URL from your DDBB as soon as you can?. You are currently affecting more than 2 million customers.
Thanks.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Website wrongly reported as phising
« Reply #1 on: November 25, 2018, 11:05:41 PM »
Already been reported here: https://forum.avast.com/index.php?topic=223475.0

We have to wait until after the week-end for an avast team member to appear and react,
and give a final verdict, as they are the only ones that could come to block and unblock.

We here are just volunteers with relevant knowledge:
Quote
11 website security related recommendations given here:
https://webhint.io/scanner/eaaa91e8-377b-4012-a874-cab8af42a2db#Security
C-grade scan result: https://observatory.mozilla.org/analyze/ing.ingdirect.es
2 retirable jQuery libraries detected: https://retire.insecurity.today/#!/scan/2308afcd41e9e62ea7e0e5f8deed7e0d3427aebdc569bdca84c3257b3ccc0b48
Susceptible to MiM attacks -> https://webscan.upguard.com/#/https://ing.ingdirect.es/pfm/#login/validation/isnomi%2fmwx%2b1bafjhphwraz9srfd3h6a8ecn4bggwdu%3d

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Website wrongly reported as phising
« Reply #2 on: November 26, 2018, 12:02:42 AM »
Thanks Polonus.
I was expecting some moderator to maybe help us. I know it's weekend but I would expect a 24x7 for reporting false positives.
Thanks anyway!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Website wrongly reported as phising
« Reply #3 on: November 26, 2018, 12:14:22 AM »
Hi monica.moreno,

You are welcome.
Avast Team members are now aware of the issue.
They are known to react as quickly as with a forthcoming update,
if need be.

kind regards,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: Website wrongly reported as phising
« Reply #4 on: November 26, 2018, 09:06:22 AM »
Hello,
it should be fixed now.

Milos