• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos1 Stats

This Network is Compromised

I have Norton Mobile Security installed, with Norton WIFI Privacy activated, and I just started getting a message from Norton on my Galaxy S7 that states:

"This network is Compromised by an unknown third party that may view and alter your communications"

I only get this message on my mobile phone, not my desktop which was also connected to the same router. The phone only gives this warning when it's connected to the 5g Network. Not the 2.4g one. I reset the router, changed the login password, and renamed the 2.4 and 5g bands, and change their passwords too. However, when I connect to the 5g network the same message pops up on my phone. Again, this doesn't happen on the 2.4g band. 

My router ( an Asus RT-AC88u) is setup as an Access Point to my Cox (Aries TG2472) Router/Modem. The cox router sucks so I have turned off the wireless capabilities and have my router connected to it's #1 ethernet port, and configured my router to work as an access point, as I said. 

I had this setup working for a few days and it worked fine. All of a sudden the "Compromised Network" message starting to come up.

Is this a glitch, or is someone really intercepting my traffic and/or spying on me? Why does this only happen on the 5g band and not the 2.4g band? Anybody have an idea what's going on? 

I have uploaded an attachment with a screen capture of the alert. 

File Attachment: 

Replies

Kudos1 Stats

Re: This Network is Compromised

Hi @Gavacho,

Thanks for reporting in Norton Community Forums. I have sent you a private message requesting for logs for further investigation. Also, could you please let us know what happens when clicked on "More" option from message? 

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: This Network is Compromised

Hello, you didn't provide a Case ID which the system asks for before sending the Logs.

Clicking the More option just told me about how people can hack in and what network I want to change to. I just tried to reproduce the problem, but it didn't show me the "more" option this time. It still has the error and asks me if I want to change the network or use wifi privacy. I'm assuming they mean a VPN....

Kudos0

Re: This Network is Compromised

I'm also seeing this notification on my phone.  I have a wifi extender that is secured with the same password as the wireless router.  When I am connected to the extender, I get this notification.  Two tablets that have Norton Mobile installed that are connected to the extender receive no warnings about the network.  When I am connected directly to the router with my phone, I do not see the message.  Since it is just occurring on the phone and not the tablets, I'm thinking that there is some bug that is causing this to be reported and that the network is secure.  At least that is what my hope is.

Kudos0

Re: This Network is Compromised

tomd1111

Check the version of Norton Mobile Security on the tablets. The message you are seeing was just introduced with the latest version that was released in the last few days. It is version 4..x.x.x..It is possible that the tablets may not have the update yet and will still be on version 3.x.x.x. That would explain why you would only see it on the phone.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

So this message was just introduced? So we are probably experiencing false positives?

Kudos0

Re: This Network is Compromised

It could be a false positive. The logs you sent should help identify what issue Norton Mobile is detecting. Then we will have a better idea of what is happening.

FWIW  I did not get any warning about my home network.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

I also just received this message on my android phone. I just installed the Google mesh network routers recently. I'm pretty sure my network HAS NOT been compromised. The Norton version number is 4.0.4024.

Kudos0

Re: This Network is Compromised

I just received the alert again, but this time it had the "more" option you were asking about. It says the attacker is "ARP Spoofing". Again, I haven't heard anything back. Is this a false positive, or real?

I've attached a picture. It asked for PDF or TXT format this time. Last time I was told it had to be in PNG format. 

Kudos0

Re: This Network is Compromised

Peterweb, I hope you are correct. I have uploaded the logs, but haven't heard anything in two days. 

Kudos0

Re: This Network is Compromised

  

Peterweb, I hope you are correct. I have uploaded the logs, but haven't heard anything in two days. 

You mentioned a lack of a case number. Were you still able to submit the logs. 

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

I just started getting this too. I was wondering if it thought my new Norton Core router was the attacker. Unfortunately, it doesn't give any useful information about the alleged unauthorized MAC or the IP it's trying to associate with.
Kudos0

Re: This Network is Compromised

Peterweb, I had to wait till I was provided a case number in a private message. I did upload the logs. However, it's taking a very long time for anything to be done. It looks as if this might be due to a new software implementation by Norton. At least I hope so. I'd hate to think someone is actually try to hack my communications.  

Kudos0

Re: This Network is Compromised

I very much doubt anyone is hacking you. Especially as it is only happening on one of the two networks.

If this is a coding issue, it is going to take some time to diagnose, recode, and test, test, test before it would be released. And I hate to ad this, but it is the Christmas holiday, so it may add even more time to get the fix.

FYI

Norton, and other developers, have as had some device specific issues with Samsung devices in the past. It seems that Samsung makes some proprietary changes to the Android OS that can change the expected behavior of some apps. Maybe this is another example of this. 

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Hi guys, I have the exact same problem: I get the warning "Your Network is compromised". When I click 'more' for additional information, it mentions ARP spoofing. Again I am getting this message "only on my Android phone" (Redmi Note4) and also I am getting this 'only on 5G network', but not on 2.5G network (also not on any of my windows laptops/ iOS devices).

Looks like all others also had this problem in the last 2-3 days, so I am hoping this is a product issue. But I request Norton team to inform us if this is indeed a real issue or just a product issue.

Kudos0

Re: This Network is Compromised

Bargo, what type of router/modem are you using? Is it your own, or are you using a cable company's? 

Btw, I still haven't heard back as to what the problem is. I was trying to solve it via the community, but I guess I'm going to have to call in and wait in line....

Kudos1 Stats

Re: This Network is Compromised

Peterweb, It's not Samsung specific. Other are having the same problem. It also started happening after they did a change to wifi security on Norton Mobile. I have had problems in the past with false positives, so I've seen this kind of thing before. And based on the performance of the Norton VPN product I've purchased, not everything they put out is ready for prime time. Having said that, I'm confident Norton will resolve the issue. 

Kudos0

Re: This Network is Compromised

Peterweb, I'm using a modem provided by my Internet provider in Australia.

I noticed one thing. The version of Nortron Security on iOS devices is 3.11.* (to be precise 3.11.2.32066881), but the version in my Android device is 4.0.0.4024. I guess the problem is with the latest version raising false positives for 5GHz network on Android devices.

Kudos0

Re: This Network is Compromised

bargo

This feature in NMS is newly introduced in the 4.x.x.x version over the last week. Looks like there is some issue with the coding for the 5GHz bands. 

Gavacho

And based on the performance of the Norton VPN product I've purchased

This may ad another piece to the puzzle. Do you have Norton Wifi Privacy, NWP, running when you see this? Have you tried turning NWP off?

Any others here using NWP?

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Peterweb, I'm not using the NWP (VPN). I don't use it on my home networks, only when I'm out and about. 

Kudos0

Re: This Network is Compromised

I am getting the same problem, just started occurring.  Interestingly enough, I have a wireless router and a Range Extender.  The network associated with the Range Extender is the only one that has a problem.  Funny that it says my Range Extender network is compromised but my regular network is fine -- even though technically they are the same network.  I get the same error about the ARP spoofing / network compromised.  I get it on my Samsung Note as well as any other computer that I connect to that "extended" network, so it is not Samsung-specific.

Do any of you guys have a Range Extender on your networks?  That is my immediate suspicion as well.

Just started happening yesterday for me as well so it has only been occurring for two days.  So I'm pretty sure it is a problem with a Norton update, but it would be good to know for sure.

Kudos0

Re: This Network is Compromised

Are you having it on the both 2.4g and 5g networks? Is your range extender set up as an access point, or just repeater? 

Kudos0

Re: This Network is Compromised

Hi Peterweb and Gavancho, I am not using any range extender or NWP. I just have the problem on 5GHz network (but not on 2.4GHz), and only have the issue on my Android mobile (not on my iOS devices or Windows laptop). 

The version of Nortron Security on iOS devices is 3.11.* (to be precise 3.11.2.32066881), but the version in my Android device is 4.0.0.4024.

So, like Peterweb mentioned earlier, it may be a coding issue in the new version (V4.x.x) of Nortron Security.

Kudos0

Re: This Network is Compromised

I also started getting "<unknown ssid> is compromised" while connected to my home Wifi.
When clicking on "Change network" it scans the network and all is green, but I keep getting these message every few hours.

App version is 4.0.0.4024

Kudos0

Re: This Network is Compromised

RoyW

Next time you see this message, see if there is a More Information link. What does that tell you about how that network is compromised?

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

There is no "More Information" link. The message is "Your personal data and communications are exposed to an attacker on this network." and I have to options: "Change network" and "Ignore for now".

I did notice that the messages happen when GPS location is disabled.
If location is enabled and I reconnect to my home wifi (disable->enable wifi), nothing happen. If location is disabled and I reconnect to the wifi I almost immediately get the message.

I wonder if the issue is the same as in the original post, or something different. It did start only in the last few days.
 

Kudos0

Re: This Network is Compromised

I re-scanned today and I am now not getting the warning about my network being compromised.  Did Norton release a new version?  Is anyone else still experiencing the problem after doing a version update?

Kudos0

Re: This Network is Compromised

I can confirm no new release since the release of version 4.x.x.x.

We have to wait to see what comes of the logs collected earlier for Sunil.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

I am also seeing the same message on my android Phone

Kudos0

Re: This Network is Compromised

I am also seeing this while using my Google Pixel on both 2.4 and 5ghz bands from my Asus Router. After I get the message I scan in the app and everything shows green. I assume that this is just a bug, but I will say it is a bit scary to get that notification.

Kudos0

Re: This Network is Compromised

I just started receiving this notification right after adding an Amazon Echo to my home network.  Since it appears Echo also has a separate network, could it be something conflicting there? 

Kudos0

Re: This Network is Compromised

Same problem here.  I just installed Norton on my Samsung S5.  I have a range extender.  When I logon to the extender via the phone I get the "compromised" error.  I only have the 2.4ghz activated.  I am not using NWP.

Kudos0

Re: This Network is Compromised

I also see this problem when using my mobile phone. When I click on more details it has a message about ARP Spoofing detected. Is anyone else also seeing this message from ARP Spoofing?

I only started getting this message after I switched my internet providers and after they finished installing their internet. It has also affected my ability to connect to my sonos devices and I've head to re-add them to my network. 

Kudos0

Re: This Network is Compromised

Matthew Wong 8888

Yes the ARP Spoofing has been reported by Gavacho above in this thread. See the attachment in this post. https://community.norton.com/en/comment/7756631#comment-7756631

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Just adding a "me too" here in hopes that more data helps solve this faster :).  I am experiencing this problem on an LG V10 phone and an AT&T branded tablet.  I just had my ISP (AT&T) upgrade my internet last week and they swapped out the old router for a Pace 5268AC router.  I have also added a Netgear EX3700 dual band extender into the network.  So far I have only seen the error when connected to the 5Ghz side of the extender.  Never on the 2.4 side, and never when connected directly to the router.

Kudos0

Re: This Network is Compromised

Richj44, 

I am surprised at the length of time they are taking to respond. I understand if they don't have a solution, but they should at least let us know they are working on it. I uploaded my logs, and haven't heard a peep from them since. That in itself makes me concerned. Is there something going on we should know about? Even a little feedback would help.

Kudos0

Re: This Network is Compromised

It is the Christmas holidays. Things may take a little longer. 

Even without the holidays, it takes time to parse the logs, figure out what is happening, find the code that needs to be fixed, fix the code, and test thoroughly before releasing a fix. It is not something that can be done in a couple of days.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Peterweb, I understand this is the holidays. Unfortunately, the bad guys out there aren't impressed. My biggest concern is that receipt of my logs were never acknowledged, and I was never told they were even working on it. A "please standby, we received your logs and we're working on it" would be nice. I use a lot of Norton products, and it's important to know that if something goes wrong, Norton is there to help. Do we all just shut down our systems and hope someone out there remembers us? A business absolutely, positively has to inform the customer what is going on. We don't expect a daily update, but again, just an official "we're working on it." would be appreciated. Clearly I'm not the only person encountering this problem.

There is too much crap going on out there nowadays and we need to know our problems are taken seriously. 

Kudos0

Re: This Network is Compromised

Hi @Gavacho,

Thanks for the logs upload. We have received your logs uploaded and forwarded to concern team. I will update once we have more information from the team.

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: This Network is Compromised

Sunil_GA, 

Thank you for your response. We appreciate it. 

Kudos0

Re: This Network is Compromised

Hi,  I also have the same warning in the last 3 days on my Galaxy Tab when casting video using Chromcast.  Is it because I use the Google Mini and Chromcast  together? One is playing music and the other is playing movie?

Kudos0

Re: This Network is Compromised

Hi, 

As mentioned above, I have the same issue with my HTC 10 phone. Like the others, I'm having issues with my 5GHz band only, and no issues with my 2.4 Ghz band. However, I'm only having issues with my NETGEAR router which is setup as an access point. I get the ARP Spoofing message when I'm connected to my NETGEAR. When I use my dual band router/modem, I have no issues on Norton Mobile Security with either the 5Ghz or the 2.4 Ghz band. When I do a speed test on my 5GHz NETGEAR router, my download speeds are significantly reduced as compared to my no-issue-wifi modem/router. I've even updated the firmware on my NETGEAR and also changed the wifi SSID and password to no effect. 

Kudos0

Re: This Network is Compromised

Kevinworking

I just installed a google wifi mesh. The Norton version number is 4.0.4024, same as you. I get the same compromised message. You are not alone. I believe the network is NOT compromised. I'm watching for a fix from Norton.

Kudos0

Re: This Network is Compromised

I have no doubt it's a false positive, at least in my case and hopefully for you guys too.
Kudos0

Re: This Network is Compromised

Had same problem on 2 android phones and solved by looking at previous blogs. I found that our laptop (not main PC that was directly wired to router) had the Norton router settings as 'public'. Don't know why, have never changed these settings, suspect a Norton update.

Use:  Open Norton (on Laptop in my case) > Settings > Firewall > General Settings > Network Trust. Then Configure +  and your router should appear, change from 'public' to 'Full Trust'.

I would check all Norton enabled windows devices connected to your router.

Hope this helps.

Kudos0

Re: This Network is Compromised

I found that our laptop (not main PC that was directly wired to router) had the Norton router settings as 'public'.

That is actually a more secure setting for your network, as it assumes you are connecting to public networks and provides tighter controls over access to your computer.

Allowing Full Trust gives full access to your computer by any device that can connect to router.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Unfortunately it doesn't apply in my case.  All four of my Windows pc's connected to the router show it as "Private", not "Public".  This setting hasn't been changed for years.

Kudos0

Re: This Network is Compromised

Let's get back on topic. This Windows setting has nothing to do with a detection on the Norton Mobile Security product.

We have to wait for Norton to analyse the logs received.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: This Network is Compromised

Starting getting the compromised message this morning on my Samsung S7 phone.  Noticed last evening that a Chromecast (1st gen) plugged into Samsung TV was flashing, which seemed strange since no device of mine was trying to access it.  Didn't think too much of it until the message this morning.  I immediately unplugged the Chromecast and the compromised message went away.

Kudos0

Re: This Network is Compromised

I was trying to get back on topic, just politely. I thought pointing out that the error occurred regardless of that setting would probably accomplish that but I guess I wasn't clear.
Kudos1 Stats

Re: This Network is Compromised

I am suddenly getting the same problem - but only on my Android phone. I have had previous Android phones and used Norton on these devices for 2.5 years. Knowing the encryption on my device is extremely secure (set up by a friend who s the IT Security manager for the Police) I am having difficulty believing its that.

So what are Norton going to do to get rid of this annoying interference, that sounds specifically to be a software issue.

Interestingly - I keep on getting this annoying text alert from Norton and have just looked into my Norton settings and found their "possible solution" to be an additional payment for Norton "WIFI Privacy". So NORTON - I do not want this "extra" as I think I have already paid for protection. 

This thread is closed from further comment. Please visit the forum to start a new thread.