Author Topic: Threat secured. ThreeUK Login  (Read 1326 times)

0 Members and 1 Guest are viewing this topic.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1328
Threat secured. ThreeUK Login
« on: July 17, 2022, 06:44:27 PM »
Constantly getting Threat Secured when login to ThreeUK account.
hxxxx://new.three.co.uk/account/login#/

I have submitted a FP form using the ID reference at bottom of one of the popup's that I captured.

Note. I had no problems accessing that site using FF browser earlier in the week.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87087
  • No support PMs thanks
Re: Threat secured. ThreeUK Login
« Reply #1 on: July 17, 2022, 07:17:43 PM »
I just wonder why 3's account login would need to connect to assets.adobedtm.com and why that site would need to run a .js (javascript) file.

Like me Avast considers this script action suspicious [Susp].

Hopefully the possible FP report form will respond soon.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.10.6038 (build 22.10.7633.734) UI 1.0.733/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33582
  • malware fighter
Re: Threat secured. ThreeUK Login
« Reply #2 on: July 18, 2022, 02:05:46 PM »
« Last Edit: July 18, 2022, 03:47:21 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1328
Re: Threat secured. ThreeUK Login
« Reply #3 on: July 19, 2022, 11:08:44 AM »
I have looked for the adobedtm script/url on the Three login page that gives rise to the Webshield popup.
hxxxx://assets.adobedtm.com/acccca982240/2889efaf6b3f/launch-e9ff484f5018.min.js
I submitted that url to Virustotal and shows all as Clear. But Avast/AVG not listed.
I have had no reply from Avast re my FP form  :(
I have also reported the login issue to Three.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87087
  • No support PMs thanks
Re: Threat secured. ThreeUK Login
« Reply #4 on: July 19, 2022, 06:56:07 PM »
Avast and AVG 'don't' participate on the VT on-demand scan of websites/links.

It doesn't have an on-demand scan on the same way as on-demand scans on a system, ashquick.exe etc. 
Also a live web shield on-access scan of a website doesn't just scan that site but the links it has/tries to connect.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.10.6038 (build 22.10.7633.734) UI 1.0.733/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1328
Re: Threat secured. ThreeUK Login
« Reply #5 on: July 20, 2022, 03:48:35 PM »
Avast confirmed FP and have updated their DB. I can now login without a Webshield Alert.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1328
Re: Threat secured. ThreeUK Login
« Reply #6 on: September 29, 2022, 03:50:29 PM »
Same problem has returned today. I will send another FP form to avast.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1328
Re: Threat secured. ThreeUK Login
« Reply #7 on: September 30, 2022, 10:33:25 AM »
Avast cleared it again in response to my FP report.