• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Web Attack: BeEF Hook Script

Does anyone know what this is.  Internet Security tells me that my bank, a very well known and respected bank, is accessing my system in this way.

Replies

Kudos0

Re: Web Attack: BeEF Hook Script

Thanks.  The Symantec link you gave says "You should take immediate action to stop any damage or prevent further damage from happening" but does not say how.

Kudos0

Re: Web Attack: BeEF Hook Script

Internet Security tells me that my bank, a very well known and respected bank, is accessing my system in this way.

close your browser and contact your bank

Kudos0

Re: Web Attack: BeEF Hook Script

Hi dforrest,

Kindly provide us with your bank's site name, so that we will be able to assist you further.

Cops

Kudos0

Re: Web Attack: BeEF Hook Script

From the message "international.lloydsbank.com (162.13.101.80, 80)".

Kudos0

Re: Web Attack: BeEF Hook Script

I have advised my bank and this is the reply I got:

I have been advised by our IT Team that the issue is related to the settings on your Norton Security rather than Lloyds Internet. Please could you lower the settings and this should resolve the problem.

Customer Service Support Team International Phonebank 

Banking Operations, Wealth, Lloyds Banking Group

Kudos0

Re: Web Attack: BeEF Hook Script

dforrest:

I have advised my bank and this is the reply I got:

I have been advised by our IT Team that the issue is related to the settings on your Norton Security rather than Lloyds Internet. Please could you lower the settings and this should resolve the problem.

Customer Service Support Team International Phonebank 

Banking Operations, Wealth, Lloyds Banking Group

Thanks for update.  Lets look for Console_Ops.   Was "Web Attack" an IPS Alert.   Was event one time.

Kudos0

Re: Web Attack: BeEF Hook Script

Yes it was called an "IPS Alert"  I have received the attack report on two separate occasions over the past 24 hours.

Kudos0

Re: Web Attack: BeEF Hook Script

dforrest:  Yes it was called an "IPS Alert"  I have received the attack report on two separate occasions over the past 24 hours.

and the Severity Medium/High -- Intrusion Attempt was blocked.... 

Kudos0

Re: Web Attack: BeEF Hook Script

Correct except that severity was given as "High" not "Medium/High"

Kudos0

Re: Web Attack: BeEF Hook Script

Sorry, by Medium/High.....I meant Medium or High not Medium-High
My History logs 4 pages of Intrusion Protection events with several Medium and several High events.  All blocked.   No worries.  I'd investigate if the IPS Alerts were persistent. 

Kudos0

Re: Web Attack: BeEF Hook Script

Console_Ops:

Hi dforrest,

Kindly provide us with your bank's site name, so that we will be able to assist you further.

Cops

 Perhaps specifying that someone who may be a target of an exploit give the name of his bank and its IP address in a PM might have been a good idea. Parts of his post should be snipped.

Kudos0

Re: Web Attack: BeEF Hook Script

Hello dforrest.

I will notify the Safe Web Team about your response.

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Web Attack: BeEF Hook Script

hok:
Console_Ops:

Hi dforrest,

Kindly provide us with your bank's site name, so that we will be able to assist you further.

Cops

 Perhaps specifying that someone who may be a target of an exploit give the name of his bank and its IP address in a PM might have been a good idea. Parts of his post should be snipped.

If it were dforrest's web address and IP I would agree as that is private. The bank's IP is public information so it is already available to anyone. 

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Web Attack: BeEF Hook Script

I continue to receive notifications of this web attack.

Kudos0

Re: Web Attack: BeEF Hook Script

As long as Norton is blocking the attacks, you probably do not have to worry.

Maybe try turning off your router and modem. When your modem restarts, it should get a new IP address (unless your ISP has assigned you a static IP for business use). This may stop these attacks for now.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.