TL;DR Just see the topic name.
About 2-3 times a week, I get an alert from Norton 360 that an app or process is trying to access my Chrome or Firefox login credentials.
The fact that it’s usually a trusted program, or a seemingly random app or process (including things like ping.exe, a video editor, a graphics card legitimate exe…you name it) makes me question whether it’s for real, or a problem with 360 – at least my installation of it.
It has only started happening since 360 changed to the Avast-based engine and feature set. And interestingly, what little I can dig up searching for similar questions is always about a similar warning from Avast. One example I found on Reddit was where Avast gave someone a warning that a popular game was trying to access his Chrome passwords.
A couple times the warning has been legit, e.g. when I ran a Malwarebytes scan, and got a warning that Malwarebytes was trying to access my browser passwords. I allowed it. (Malwarebytes actually has a document explaining why such a warning can occur during some of their scans.) But others are just head-scratchers.
I know that malware trying to steal browser passwords is a real thing (though in my case the hacker would find nothing of value), but I just can’t find evidence of it somehow being done via random known (and properly located) apps or processes. Again, what little I can find always refers back to an Avast warning that’s almost identical to my Norton 360 warnings.
I like the idea of browser protection, but this just sounds buggy, and it’s adding to my tentative plans to ditch Norton when my subscription ends in about a month – after 15 mostly-satisfied years with it. (Having those nutty, useless UDP(17) entries absolutely overrun Security History like tribbles is another thing driving me away. It makes it hard to see any other recent history. And I shouldn’t have to go into Windows network settings to fix it.)
Anyway, back to the original question:
Has anyone else had any alerts that an app is trying to access your browser passwords or credentials?