Natwest Phishing

Options
grumpycrab
grumpycrab Posts: 4,989 Forumite
Name Dropper First Anniversary First Post Bake Off Boss!
edited 10 March 2018 at 5:05AM in Techie Stuff
Anybody got any ideas how this happened? Neighbour using Chrome with Trusteer Rapport extension and Norton; problem logging on to Natwest account - presented with a form (not a pop-up but no photo of page taken so not really sure what happened here) to enter details...late at night...entered details... thought someone was fishy...
Following day, problems with BT, Barclaycard, Natwest.

He's reported all this et al but is as worried as hell. I looked at his computer (starting offline) and nothing suspicious in browser History, MWB, Norton, Zemana. Trusteer Chrome extension looked like the correct version. No email links clicked beforehand.

The only clues - Chrome version wasn't the latest (I reinstalled - think it upgraded from version 64 to 65 at the same time [STRIKE]but didn't check the original version unfortunately so I don't know how old[/STRIKE]); Windows 10 "Virus and threat protection" was "red" - needed a restart; "App and browser control" was "red". I have since reinstalled Chrome and Trusteer and all looks well. A mystery.
If you put your general location in your Profile, somebody here may be able to come and help you.

Comments

  • John_Gray
    John_Gray Posts: 5,823 Forumite
    Name Dropper First Post Photogenic First Anniversary
    Options
    grumpycrab wrote: »
    Neighbour using Chrome with Trusteer Rapport
    I have highlighted the problem for you!
  • J_B
    J_B Posts: 6,443 Forumite
    Name Dropper Photogenic First Post First Anniversary
    Options
    John_Gray wrote: »
    I have highlighted the problem for you!

    http://www.trusteer.com/en/support/uninstalling-rapport-windows-10

    Awful program - does nothing but cause problems - avoid at all costs.

    :mad:
  • grumpycrab
    grumpycrab Posts: 4,989 Forumite
    Name Dropper First Anniversary First Post Bake Off Boss!
    Options
    I knew Rapport has caused issues before -performance related- but responsible for enabling phishing? Surely not. (although I didn't witness the issue, an old version of Chrome may not have been as secure as I had assumed).
    If you put your general location in your Profile, somebody here may be able to come and help you.
  • forgotmyname
    forgotmyname Posts: 32,552 Forumite
    First Anniversary Name Dropper First Post
    Options
    Trusteer, Norton and Windows AV all running???
    Censorship Reigns Supreme in Troll City...

  • AndyPix
    AndyPix Posts: 4,847 Forumite
    Name Dropper First Anniversary First Post Photogenic
    Options
    Neither Norton nor trusteer will protect you from phishing.
    Norton because it is crap , and trusteer because it is not designed to.
    Trusteer just stops your screen being seen in a remote session, but has know way of knowing if you are on a fake page.

    Oh and you can!!!8217;t have defender and Norton running.

    I suspect a bogus link has been followed
  • grumpycrab
    grumpycrab Posts: 4,989 Forumite
    Name Dropper First Anniversary First Post Bake Off Boss!
    Options
    John_Gray wrote: »
    I suspect a bogus link has been followed
    That's what I think. Email was not running (via clients or browser) and history didn't show anything other than various vistits to https://www.nwolb.com
    His bookmark to this -which he claims he always uses- was valid. I'm going to try some bad spellings of https://www.nwolb.com ...
    If you put your general location in your Profile, somebody here may be able to come and help you.
This discussion has been closed.
Meet your Ambassadors

Categories

  • All Categories
  • 343.2K Banking & Borrowing
  • 250.1K Reduce Debt & Boost Income
  • 449.7K Spending & Discounts
  • 235.3K Work, Benefits & Business
  • 608K Mortgages, Homes & Bills
  • 173.1K Life & Family
  • 247.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 15.9K Discuss & Feedback
  • 15.1K Coronavirus Support Boards