Hello, I am in Australia, using a PC with Norton 360. This morning, while checking my bank accounts, I received a pop up from Norton referring to bankMode.toaster.openBankMode. It only happens when I am one particular bank site. I have run smart scan and closed the browser. Is this a scam?
Issue:
Detailed description:
Product & version number:
OS details:
Error message:
Supporting screenshots:
You mean is popup from Norton a scam? or false positive?
Are you running Norton Private Browser?
What’s website domain name/address? (space name/address to break link)
You’re Norton 360 v24.10.9535?
bankMode.toaster may be v24 Browser Protection flag?
Please post supporting screenshots:
Please share website domain name/address:
Please use Preformatted text </> to break link:
Hi bjm, yes I am running 360v24.10.9535 but I have done a search of BankMode and can find nothing.
This is the popup.
![Norton Popup|480x640](upload://u1GjViTkysSL0itREUowU9dPfOz.jpeg)
https://www.stgeorge.com.au/online-services/internet-banking
Thanks! for taking picture and sharing.
I’ve not seen bankMode.toaster.openBankMode
popup sure looks legit
I’ve not seen. I’m real curious…now.
You were logged on to your account?
Sorry, I’m not reproducing popup just by landing on bank site.
Hi, it only pops up once I have logged in.
I have been to other banks, which I have accounts with, and I don’t see the pop up.
I am pretty sure it’s a scam.
It sure looks legit.
Norton Chat and Social Support has function to upload screenshots.
Maybe, Norton support is familiar and knows what bankMode.toaster means.
the fact that you have to take a picture … sure makes it feel legit
some v24 popups don’t screen capture … I’ve needed to take picture for v24 popups
Hello @Paul_M1
Let me see if I can ask Norton support.
I’ll get back asap.
Chat support estimated wait time is between 20 - 30 minutes.
I’ll get back to you as soon as I can.
Hello @Paul_M1
VPN On or Off?
VPN is off
Can popup be reproduced your side?
=======================================
Okay, I went 10 rounds with Chat support and Social support.
I got long winded nonsense scripted responses with instructions for v22.
The short answer: pop up is a general pop up just for the safety of your bank information.
Lv1 support had no idea and was reaching for what they thought would satisfy me.
I even stays up now once I have left the site.
![IMG_1026|480x640](upload://vt2M2fygoYZoJ9bjsj2ONZt3FUQ.jpeg)
Yeah…X out and see if any related info with Security History.
I’ll try asking amongst Community.
Support wrote: if you add bank website address with Browser Protection exclusions…you won’t see popup.
==================================
Chat support posted this:
The Browser Protection feature is designed to proactively block new or unknown malware programs before they attack your computer. Protecting your browser, your Norton product helps secure sensitive information and prevents attackers from controlling your system remotely.
=========================================
Learn more about Browser Protection [here]
======================================
Avast Secure Browser has Bank Mode [here]
I’m curious whether bankMode.toaster pop up is related to Avast database.
I’m probably reaching too far out on a limb.
I’ll try asking amongst Community.
Can popup be reproduced your side?
Hello @Paul_M1
I’ve received message from one who knows way more than me.
Maybe, bankMode.toaster.openBankMode = experimental…Bank Mode toaster/popup → open Bank Mode
Maybe, code from Avast?
Bank Mode is a paid feature available in Avast Premium Security [here]
Thanks for the information. I just clicked on it to see if it would link and the entire screen went black. I immediately shut my computer down and then ran smart scan.
I can’t imagine that a Norton related product, or one from an affiliate, would cause the screen to completely die.
what browser? what browser extensions?
had you added exclusion?
https://www.stgeorge.com.au/online-services/internet-banking
Did you recently install any programs or browser extensions?
Did you recently allow push notifications?
Did you recently change site permissions?
Do you run browser sync?
and you had previously cleared cookies n cache
one who knows way more than me…added
Most likely experimental and inherited from Avast, not yet fully implemented. Will be coming soon.