Avast Intercepting some banking traffic.

Avast Free Antivirus / Premium Security
1

Hi

Can you check your mail shield software.
I am aware that it inserts it’s own Self Signed Certificate into the Root CA store so it can check mail in https and TLS sessions on the fly. However it appears that in the case of the banking website for Intelligent Finance https://my.if.com/Security/Auth/Logon the Certificate is being used as the issuer certificate.

I checked Nat West’s Logon and also my own websites certificate and they appear to be showing the correct issuer however. So it may be a case that the program may have falsley interpreted the site as a Web Mail site.

However it does not bode well when you are effectively performing a MITM attack on banking traffic (intentional or not)

Ravestar68

2

Hello,
what browser and it’s version do you use? I see this issue only in Firefox 37.0.1 but it shows error “Secure Connection Failed” even without Avast. More info: https://support.mozilla.org/gl/questions/1056444

Milos