This forum thread needs a solution.
Kudos2 Stats

Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 16-Mar-2023 | 9:52AM · 37 Replies ·

This is my home network and there have been no changes and no new apps have been added to our phones.  It is happening to both our phones but not our laptops, and they are all the same network. We never use public networks. We use our mobile data on our phones if we need to use the internet while out running errands. The VPN turns on but will not turn off. If I manually turn the VPN off it says, Secure Wi-Fi Network. But it will do the same thing again later in the day. Also, sometimes only the one phone will do this not always both phones. Both the phones are identical. There is never a problem on our laptops (Windows 10 Home Version). This has to be a bug with Norton 360 Mobile that has just occurred within the last 3 days. That is when an update to Norton 360 Mobile was installed. We had no problems up to that point. You never really get a good answer when you call Norton. It is usually very difficult to understand their techs bad English. All they ever want to do is take over your phone remotely. I have had them mess up other settings that were not causing any problems by allowing them access. I know other people are having this problem but I been unable to find a solution. Anybody have any ideas? 

Labels: Android, VPN, Wi-Fi Security

Replies

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 16-Mar-2023 | 11:11AM · Permalink

What device and OS version are you using?

If nothing else has changed, I would suggest you try reinstalling 360. Uninstall 360 then restart your device. Then reinstall and activate 360 and see if you still see this issue.

Kudos1 Stats

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 18-Mar-2023 | 4:27PM · Permalink

The same on my Samsung s22 ultra.

Latest Samsung Android version available for phone just installed yesterday. My router is an Asus Rt-ax89x and is at its latest version of firmware. Really would help if Norton explained better what they were seeing.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 18-Mar-2023 | 5:07PM · Permalink

tns:

The same on my Samsung s22 ultra.

Latest Samsung Android version available for phone just installed yesterday. My router is an Asus Rt-ax89x and is at its latest version of firmware. Really would help if Norton explained better what they were seeing.

Are you also seeing  the SSL Decrypting Wifi Security message?

What Android version do you have now?

If you just got an Android update and you started seeing this message, sounds like something with that update may have triggered something in Norton. Reinstalling Norton may clear out some data that might be involved with this error. Uninstall Norton, restart your device, then reinstall and activate Norton and test.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 18-Mar-2023 | 5:32PM · Permalink


 

Same message vpn turned on, compromised network ssl decrypting detected. Android 13. Note rhat problem has been occurring for a week or 2 at least. Before this latest update to my Samsung android operating system. I believe it started with an update to norton 360 at the beginning of the month. Reinstalling Norton does not help.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 18-Mar-2023 | 5:43PM · Permalink

It is possible that it is a false positive. Please send logs to Norton to help with the diagnosis.  

Open the 360 app and tap the three bars at the top left. Tap on Settings > General, and scroll down to the Logging section. Turn on Enable Debug Log. Then continue using your device until your issue happens again. After the issue has happened, go back to the Debug Log settings and then tap on Send Error Report with log files. In your submission please include "forum 'your username' " in the Case ID section of the report. Also include a link to this thread. You can turn off logging when you have sent the logs.

If you do send logs, please let me know and I'll notify my contacts to look for them.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 18-Mar-2023 | 6:01PM · Permalink

Okay log turned on. Not sure how fast it will hit again as current hasn't for last 10-15 minutes, and I probably won't be using the phone much more tonight.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 19-Mar-2023 | 12:22PM · Permalink

I have the same problem.  Only my android phone is seeing this issue.  When I run smart scan with my PC, it indicates no problems with the network.  Just to be safe, I changed the name on my router and changed the password.  Everything was fine for two days, then my phone came back with the same issue.  Must be a Norton bug.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 21-Mar-2023 | 4:11AM · Permalink

I am having the same problem since March 10 according to my logs. Only on phones, not tablet (all are samsung) or PC. I also changed my admin password on router and the wifi pw. That resolved the issue for a few hours. Please advise if it is a bug or if someone has uninstalled/reinstalled on their phone and it resolved. 

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 21-Mar-2023 | 4:45AM · Permalink


 

I've sent logs last night.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 21-Mar-2023 | 8:33AM · Permalink

I've sent logs last night.

Thanks. I have escalated this thread as there are multiple users seeing the issue.

Kudos2 Stats

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 21-Mar-2023 | 11:37AM · Permalink

Hi,

Thank you for reporting this behaviour. We are looking into it. 

Gayathri R | Norton Forums Global Community Administrator | Gen Digital
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 25-Mar-2023 | 4:52PM · Permalink

I too am having this issue over the past few days. I've done all the suggestions such as reinstalling norton, rebooting modem and router, changing router / wifi passwords/ making sure all firewalls are on ect. It seems to come and go; so it's a bit of a relief to see it might actually be a bug on Norton's part as I've been battling with it half the day today trying to stop it. Hoping that Norton is taking this seriously and looking into it since this is a bit more widespread.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 26-Mar-2023 | 4:19AM · Permalink

We had the same problem a few weeks ago. Only on our android phones and no other devices. I was suspicious our problem came from when I downloaded something from the Garmin IQ Store; I didn't realize at the time this wasn't through Google Play.

I did a factory reset on my phone with no backup restored. I slowly downloaded my apps over the next few days. Shortly after downloading the Garmin Connect app, the problem returned with Norton saying my network was not secure. At least I wasn't dumb enough to download the Garmin IQ Store app again lol.

So I did a factory reset on my phone with no backup restored, for a second time. I haven't downloaded the Garmin Connect app or paired my Garmin Venu sq watch to my phone. The "compromised network: attack type: SSL decrypting wifi securty" alert from Norton has NOT returned.

I'm hoping this is all a coincidence and it's just a bug from Norton that will be resolved soon. I miss using my Garmin smartwatch.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 26-Mar-2023 | 12:00PM · Permalink

I am sure that Garmin apps have nothing to do with this, so you should just go ahead and reinstall them.   I find it goes away for awhile and then suddenly starts again.

Almost certainly a Norton bug.  If not then they absolutely need to identify a way to look for what triggers it so that people can fix their home networks.  Its not reasonable to just say don't use your home network.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 26-Mar-2023 | 2:18PM · Permalink

As Norton Employee Gayathri_R has posted above, they are aware of this issue and are looking into it.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 27-Mar-2023 | 10:05AM · Permalink

I too am having the same issue on my home network. Only occurs on both of my Motorola G6 android phones running V9. I do have network extenders installed.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 27-Mar-2023 | 12:09PM · Permalink

Hi,

Thank you for posting on the Norton Community. We have resolved this issue. However, if you are still seeing this behaviour, could you please send us Debug logs? Below are the steps, and once you have sent them, please let me know. 


Send error reports to Norton

 

  1. From the home screen, launch the Norton 360 app.

  2. In the top-left corner, tap the menu icon , and then tap Settings.

  3. Tap General.

  4. Under the Logging section, next to Enable Debug Log, move the slider to On.

  5. Reproduce the problem with Norton 360 app that you want to report to us.

    For some problems, you may need to keep the Logging feature enabled until the problem gets reproduced (hours, days, or sometimes weeks).

  6. Once the problem is reproduced, repeat steps 1 to 3 to go to General Settings.

  7. In the Logging section, tap Send error report with log files.

  8. Type 1943555 for Support Case ID. In Description, please enter your Norton Community username and this forum thread's URL: https://community.norton.com/en/forums/norton-360-mobile-keeps-sending-m...
    And then in the top-right corner, tap the arrow icon .

  9. Select your email application.

  10. Add any comments that may help, such as steps to reproduce the problem, information on when exactly the problem occurs, etc. and then send the email.

  11. Make a note of the date, time, and email address that was used to send the error report.


Submit crash logs for Norton 360 app

  1. If you receive a message from Android stating that "Unfortunately, Norton 360 app has stopped.", tap Report to submit a crash log.

  2. Make a note of the date and time when you send the crash report.

Gayathri R | Norton Forums Global Community Administrator | Gen Digital
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 27-Mar-2023 | 12:32PM · Permalink

I have posted a similar problem under a different problem name, and have received the debug instruction. Haven't capture it yet.

I should note that I haven't seen it on my Windows 11 laptop, but my wife IS seeing essentially the same message, formatted differently, on her Win 11s Surface Go. 

It seems that the message occurs when there is some sort of reconnection to wifi. When I had installed a range extender for my nework we both got the message frequently. It was likely because we were toggling between different wifi sources (router and extender), so the reconnection happened more frequently.

R.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 27-Mar-2023 | 12:37PM · Permalink

You didn't say if had to wait for fix. Hit this same compromised network message about the same time as was reading the email saying it was fixed. Have sent a new set of logs.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 28-Mar-2023 | 4:34AM · Permalink

Hello All,

If you are still experiencing compromised network alert, please go to https://mobilesecuritycore-detection.norton.com/ in mobile browser  incognito tab?

We want to see if browser shows the same error at the time it is shown in N360. Please help with your inputs.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 28-Mar-2023 | 6:02AM · Permalink

I received an email from Norton telling me to go to a link using incognito. I did that and I get a message saying the certificate expired 18 days ago. And to check my clock. My clock is fine.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 29-Mar-2023 | 3:08AM · Permalink

I tried going to the site as well, in very small letters I got to a page saying welcome to Norton. I turned off the VPN and got the same message as above regarding the certificate for the site. I did not go on to the site. 

You state that the bug is fixed, do we need to download an updated version of the app in order to fix it, or was it pushed automatically?

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 29-Mar-2023 | 7:14AM · Permalink

Hmmm, was the problem simply an expired certificate on the https://mobilesecuritycore-detection.norton.com/ web site? If that is the case shame on Norton. Either way they owe us an explanation. Transparency is always better than gas lighting.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 29-Mar-2023 | 10:10AM · Permalink

I'm having this same issue on my Samsung Galaxy S10 since I put Norton 360 Mobile protection on.  What the hell is this?  The issue clearly isn't fixed yet. It's funny because 1 minute it shows my WiFi as secure and then 1 hour later I get the same SSL Decryption alert.  Is this on Norton's end?

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 30-Mar-2023 | 2:07AM · Permalink

I tried to get to the site again at 0500 EST. Again got to a page with "Welcome to Norton" in extremely small letters. I disabled VPN and then got the page stating the connection is not private. The page also had NET::ERR_CERT_DATE_INVALID. Went to Advanced and see: This server could not prove that it is mobilesecuritycore-detection.norton.com; its security certificate expired 20 days ago. . . . Your computer's clock is currently set to Thursday March 20, 2023. . . 

Still an issue, still getting VPN turned on and off. Again I ask was the update distributed via a push or do we need to download the update?

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 30-Mar-2023 | 7:05AM · Permalink

Again I ask was the update distributed via a push or do we need to download the update?

Any update would come through LiveUpdate. If your device has not run LiveUpdate you can force it by tapping on the three bars at the top right of the 360 screen and tapping on Settings > General and tap on Run LiveUpdate.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 30-Mar-2023 | 7:26AM · Permalink

I am still receiving the warning message, this morning when I turned on my phone. I have my own thread on the issue. I've run live update many times. How long is this going to take?
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 3:20AM · Permalink

I checked the version I have on my phone, it is 5.57.0.23031007   Norton 360 Deluxe. Should the issue be resolved in that version? (Note that I ran the update just before sending this to ensure it is the latest version). 

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 3:31AM · Permalink

Hi,

Thank you reporting this issue.

To investigate further, we would like further details from customers who are seeing issue. If you are continuing to experience this issue, could you please follow the below steps?

1. Open phone browser in incognito mode. Go to https://mobilesecuritycore-detection.norton.com/ ,   If you are getting ERR_CERT_DATE_INVALID the follow step 2

2. Once CERT error is reproducible, Install network analyser app on phone. In this app, Tools--Ping. Ping mobilesecuritycore-detection.norton.com` to get the IP address of servers (could be multiple IP addresses).


Please share the IP addresses in this thread. This will help us investigate further. Thank you for your help.  

Gayathri R | Norton Forums Global Community Administrator | Gen Digital
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 6:38AM · Permalink

I again encountered the error when checking my wifi security this morning. I pinged "mobilesecuritycore-detection.norton.com" and the Server responding was "a23.192.41.83" Checked status a few seconds later and it was good, and as expected the ping showed a different server. As I was writing this I checked it again, received the error and ping again it showed the .83 server. I also did a trace route if you want the next to last server's ip let me know.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 7:06AM · Permalink

When I follow your steps to open the browser in incognito mode and go to that website all that happens is I'm brought to a website that says Welcome To Norton in really small letters in the upper left corner of the page. What the hell is this? Every other time you've posted this in the past it's the same thing. Can you just answer us straight up instead of dodging the question everytime! Is this a false positive error and is this a problem on your end, not actually our home networks being compromised by a 3rd party SSL Decryption like your software keeps telling us? Just answer us straight up! No more dodging the question.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 10:11AM · Permalink

I think it's acknowledged to be a Norton problem involving servers in some way. Everyone is getting that same Welcome To Norton page, not sure why we keep being told to try it. I'm getting fewer of the alerts now, one or two a day, far fewer but still there.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 31-Mar-2023 | 1:05PM · Permalink

I don't know if they fixed something or not. Note I am one if the people whose logs they reviewed for this problem. Last occurrence for me was on Monday. However it might have gone away because of some equipment changes. I am still using a Galaxy S22 Ultra. However my Isp provider upgraded my internet speed. Among other things the ont was switched out, Tv set-top boxes that used Moca to talk to their router were removed, and their router and my Asus ax89x router were removed and replaced with a Tp-Link Archer AXE300. Leaves all sorts of possibilities. Any one still having this problem a user of an ASUS router? Might be something Norton was expected that the ASUS router blocks.
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 01-Apr-2023 | 6:52AM · Permalink

GaboonViper:
Every other time you've posted this in the past it's the same thing. Can you just answer us straight up instead of dodging the question everytime! Is this a false positive error and is this a problem on your end, not actually our home networks being compromised by a 3rd party SSL Decryption like your software keeps telling us? Just answer us straight up! No more dodging the question.

 FYI  Please remember that the forum admins here cannot solve your problems. They report the issues to the appropriate teams and pass on questions from the team to help with diagnosis. Then they pass that information back to the team. Any actual fixes are done in the background at Norton.

Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 03-Apr-2023 | 3:03AM · Permalink

Hi,

Thank you for reporting this behaviour. We apologise for any inconvenience caused. This issue has been resolved now. Please let us know if you're continuing to see this issue. Thank you.

Gayathri R | Norton Forums Global Community Administrator | Gen Digital
Kudos0

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 03-Apr-2023 | 9:07AM · Permalink

I received an email stating the problem was fixed. I feel that if you want to keep us as customers you owe us an explanation, especially those of us that took the time to assist in troubleshooting for you. Please let us know what the fix was. Was it a server with a bad certificate ( i.e. the one that I reported on ending in ".83")? I fell sorry for those that did a total restore of their phone, or those that spent hours uninstalling and reinstalling apps.
Kudos1 Stats

Re: Norton 360 Mobile keeps sending message: Found compromised network: (network name). Attack type: SSL Decrypting WiFi Security.

Posted: 03-Apr-2023 | 11:06AM · Permalink

Appreciate all of the inputs which helped us isolate the cause. It was indeed a server causing bad calls. Identifying that server is where we reached out for you help. Important part is to make sure this identification gets seamless which is work in progress.  if this issue ever happens, we do not have to wait for end user inputs. 

We were still waiting for issue confirmation beside monitoring telemetry.  Thank you again to all for your great help and timely inputs. 

This thread is closed from further comment. Please visit the forum to start a new thread.