I have Norton Mobile Security installed, with Norton WIFI Privacy activated, and I just started getting a message from Norton on my Galaxy S7 that states:
"This network is Compromised by an unknown third party that may view and alter your communications"
I only get this message on my mobile phone, not my desktop which was also connected to the same router. The phone only gives this warning when it's connected to the 5g Network. Not the 2.4g one. I reset the router, changed the login password, and renamed the 2.4 and 5g bands, and change their passwords too. However, when I connect to the 5g network the same message pops up on my phone. Again, this doesn't happen on the 2.4g band.
My router ( an Asus RT-AC88u) is setup as an Access Point to my Cox (Aries TG2472) Router/Modem. The cox router sucks so I have turned off the wireless capabilities and have my router connected to it's #1 ethernet port, and configured my router to work as an access point, as I said.
I had this setup working for a few days and it worked fine. All of a sudden the "Compromised Network" message starting to come up.
Is this a glitch, or is someone really intercepting my traffic and/or spying on me? Why does this only happen on the 5g band and not the 2.4g band? Anybody have an idea what's going on?
I have uploaded an attachment with a screen capture of the alert.
this network is compromised....(red screen)... i have this message too on my cell phone.. i have installed norton mobile security version 4.0.1.4039 on 2 cell phones and 2 tablets...but i only get the message on my cell phone which has a sim card installed... all 4 devices are on the same wifi network at the same time. the only difference i noticed is that only my cell phone had a sim card installed and developed the problem...so i instantly set my cell phone on flight mode which means that i deactivated the sim card ...... .......... the result .. .the next minute ..the message disappeared on my cell phone and the wifi network turned into safe again(green screen.).... i dont know.maybe i was lucky but it happened twice.. when i set flight mode on the cell phone with the sim card installed the network turns into safe... hope i helped
*edit to add: since firmware update Norton no longer says my phone is vulnerable to KRACK attack - I'm sure it's not related but for added info
That is good news, and probably explains why you got the firmware update. It was probably to correct the KRACK vulnerability.
I only speculate that although the network you are connecting to is the same, the new version of NMS may not have re scanned the networks after it was updated for this issue. Once you deleted and re established the connection, it was re scanned.
If others still seeing this can try the same process of having the device forget the network connections, restart the device and then reconnect. Then see if the warnings are still displayed.
I have just encountered this message again, for the first time in weeks.
Incidentally it was immediately after my android phone updated its firmware, I told the phone to forget the network and rejoined, since then Norton Mobile Security tells me my "Network is Safe" Seems strange how it immediately is analysed as safe even though it is the exact same network??
Device is Samsung galaxy j3, Norton Mobile was running current updates 15/2/18,(version 4.0.1.4039) no new/unknown devices on the network, no wireless extenders or any such in place, all other devices on Network (pc's + laptops) have Norton Security installed and no issues.
*edit to add: since firmware update Norton no longer says my phone is vulnerable to KRACK attack - I'm sure it's not related but for added info
In my case I got this message in all three Android smartphones at home. Also I know there's ARP hijacking on my network, but it's intentional - a third-party device acts as the gateway and inspect all network traffic - so the alert is real but I specifically configured my network that way.
In other words, is there a way to turn off only the WiFi scanning or even better only the WiFi scanning for certain networks?
I am using the same router as you, but am not using the mesh mode right now. I do have it set up as an AP. Every now and then I still get the "Arp Spoofing" or "unsecured network" warnings. But not nearly as frequent.
RedTape:
For what it's worth, I am no longer having this issue on my Asus mesh network (RT-AC88U router and two Asus RT-AC68U nodes). In order to setup the mesh, I had to update the firmware on the router and nodes. I would suggest doing that (for security's sake if nothing else), and I'd also try dropping the network from your phone and re-registering it.
For what it's worth, I and no longer having this issue on my Asus mesh network (RT-AC88U router and two Asus RT-AC68U nodes). In order to setup the mesh, I had to update the firmware on the router and nodes. I would suggest doing that (for security's sake if nothing else), and I'd also try dropping the network from your phone and re-registering it.
I can't speak for others, but in my own case the firmware is up-to-date, I don't use mesh and I tried dropping the network and all that :)
For what it's worth, I am no longer having this issue on my Asus mesh network (RT-AC88U router and two Asus RT-AC68U nodes). In order to setup the mesh, I had to update the firmware on the router and nodes. I would suggest doing that (for security's sake if nothing else), and I'd also try dropping the network from your phone and re-registering it.
I was told to post in here as well. I originally posted my first encounter with this issue here on January 28, 2018: https://community.norton.com/en/comment/7805071#comment-7805071 and again here last night, on February 4, 2018: https://community.norton.com/en/comment/7812531#comment-7812531
My situation: I am seeing the message from time to time on my Samsung Note 8 which has the latest version of Norton installed on it, my wife does not seem to have this issue while she has the exact same phone, same software versions, and is on the same network. My router is an RT-AC3100, and unlike others, I am not using WIFI extenders. It only happens on my 2.4 Ghz network, not on the 5 Ghz or wired network.
Aside from hoping that an answer to this issue will follow, I am wondering that if ARP spoofing is actually happening somehow or when they're false positives, if there is (or will be) a way for us to see what MAC address is being spoofed, so we may be able to see if we can change something on our side to prevent these false positives from happening.
My problem went away for about a month, but it is back again -- even after the update from a couple of weeks ago was installed on my Samsung Note 8. So the problem has not been resolved with the latest update.
BTW I do have a Netgear wireless extender on my network, but I get the erroneous warning when connected either to my primary wireless router or to the range extender.
Interesting thread, wish there were solutions though. Since tonight I have been getting the same warning message on my phone (Samsung Note 8). Weird thing is, my wife (same phone, provider, version etc and also same Norton version etc) does not.
My router is an RT-AC3100, it is not used as access point, nor is there a wifi extender on my networks. So far I have seen the message only on my 2.4Ghz network, not on the 5.0. Other devices that run Android, Windows or iOS and are connected to the same network and that have Norton installed do not have the problem, it's only on my phone apparently (which makes me believe it's not actually true, yet I'm paranoid enough to not trust it either).
Seriously hope Norton comes with a solution soon, I'm surprised there's people that have the issue for a month now and are still looking for a solution. That is totally not acceptable.
I'm having the same problem, I think. I've got another thread posted here:
https://community.norton.com/en/comment/7799091#comment-7799091
I'm going to try changing my SSID on the extender to something else to see if this changes the behavior of Norton.
Edit: Unfortunately, this causes a problem where I have to manually reconnect any time I want to go upstairs or downstairs with the phone because my phone wants to stay connected to whatever it's already connected to, regardless of whether the other is closer and providing better signal. This is not an optimal solution.
First world problems. We could use a fix for this.
I have also had this Norton mobile notification this morning on my Samsung, it was repeating every 10 minutes, the only recent change to the network was a brand new windows 10 machine connected wirelessly, about 10 minutes before the Norton notification.
I have disconnected all wireless devices from my router, changed password and re-added devices (including the new windows 10 machine) and ran Norton mobile update and I am no longer getting the warning.
Strangely, before changing the password etc my router was showing devices (such as friends phones) as still being connected via Wifi which would not have been possible due to them not being anywhere near at the time (although it has always showed this) But since password change they have all disapeered.
Oceanracer & Gavacho,
I appreciate your concern on the issue as its been bugging you since long. I may be lucky to resolve it though I m not a technocrat. I am hanging around to gain knowledge and if I may encounter the issue again.
Hey man, sorry if I jumped the gun. I genuinely thought you were just someone stirring the pot, so to speak. I guess I'm a bit fed up with the "don't call us, we'll call you attitude" Norton seems to have taken with this problem. I've had really good luck with them in the past, but for some reason they seemed to have screwed the pooch on this one. Still not an excuse for me to flame you. Mom taught me better... I'll try and not be so quick on the draw next time.
Hopefully they'll have this thing figured out eventually.
RaSgo:
Oceanracer Thanks for not treating me an agent of Norton. This problem bugged me so I came into forums to find an answer from all you experts. I may be blunt in saying no need for a patch or update becoz I think the problem can not keep troubling so many people and Norton will sit quietly. What I did was a hit and trial and I got rid of the problem. Changed the encryption type, ssid and p/w of my router offline thinking if someone is trying to hack will not know. Gavacho Troll is definitely an annoying word, use it carefully.
I get this problem on three networks around town and on my WD Passport private network. I do not get it on my home network (U-verse residential gateway) or out on my Ubiquity range extended network. NMS 4.0.1.4038. Android 8.1, Nexus 6p. This is a fairly recent phenomenon. On the networks with the problem, the app ARP Guard by First Row does not show the problem. I suspect a false positive introduced with NMS 4.0.1.4038. Let's hope that Norton can reproduce the problem and fix it with a new release.
I just ran the liveupdate on Norton Mobile (WiFi security) on my Android cellphone. It does not seem to show the error message anymore: Now when I am connecting to one of my problem router, I get "This Network is password protected and has strong encryption" and the Network in question now shows a label stating "Secure Network" on a green background (it used to be red) .
Oops, 30mns later and I am still getting the message (red background n' all). I think my extender was not connected properly that's why I was not getting the error message. I rebooted the extender (I could not access the Internet through it until now), and now I get the error message again!
FYI, the problem seems to be fixed on my Samsung S8+ and S7. I am running Android Mobile version 4.0.1.4038 and am no longer getting these messages when roaming between the nodes in my network. I changed nothing in the wireless network since reporting the issue. I am running an Asus RT-AC88U router with two Asus RT-AC68U nodes using the new Asus AiMesh setup.
The APK to this version was released on 1/18/2018 so it's a recent update. Check your version, update the app, and see if that fixed it for you.