seit einigen Tagen bekomme ich bei jedem Anmelden eine Medlung von AVAST Premium Security das eine Bedrohung gesichert wurde, siehe Bild unten.
Mit “PC Scannen” wird der Smartscan ausgeführt der nichts findet und auch der anschließende Scan “komplexe Probleme” finden nichts. Mein System (Win 11) ist auf neuestem Stand und auch sonst sind alle Treiber aktuell.
Ist dies eine Fehlerkennung?
Was kann ich tun. um das problem zu korrigieren?
Nebenbei: Es wäre hilfreich, wenn man die Einträge in der Meldung markieren und kopieren könnte, denn beim Abtippen, um danach im Netz zu suchen, macht man auch Fehler.
First, I’m an Avast user and not an Avast Team member.
You can use the World Icon to translate this reply.
Sie können das Weltsymbol verwenden, um diese Antwort zu übersetzen.
A strange very one here, given this is an Avast alert on windows.net, a core cloud domain owned and used by Microsoft for Azure services, software updates, and application telemetry.
I will try to attract some Avast Team input to your topic and investigation of the alert.
Hello,
thanks for your reply, as this is my frist topic here, I just hope that the right people can take a look on it.
I did not tag it as a “wrong alert” yet, that is an option in the pop-up window, and tried to search for it a couple of times, but never found anything to it.
As the threat is “URL:Phishing”, try clearing your browser’s cache; this may be enough to stop the alert from appearing, as is often the case with this sort of alert.
The fact that it’s a Microsoft address doesn’t change anything; it’s just this specific address that’s being detected, whilst others within the MS domain – and more specifically those from “blob.core.windows(.)net” – are not.
Here’s what the AI indicates when searching for this link:
Point to watch out for: Security and Phishing
Although the domain belongs to Microsoft and is completely secure by design, anyone can create an Azure account and host files on it.
Because of the trust placed in the ‘windows(.)net’ name, cybercriminals regularly use it to bypass security filters. They store the following there:
Phishing forms (fake login pages for Microsoft, Netflix, banks, etc.).
Malicious files (malware, viruses) disguised as invoices or important documents.
What should you do if you come across this link?
…
Check the full URL: The full address usually looks like accountname.blob.core.windows(.)net/dossier/fichier.html. If the “account name” is a string of strange letters (as your link) or has no connection to an official organisation, be cautious.
…
And
Our Cyber Threat Intelligence Unit is tracking an ongoing phishing campaign that exploits Microsoft Azure Blob Storage to host realistic credential harvesting pages impersonating legitimate Microsoft login portals (e.g., Office 365 sign-in). Attackers place simple HTML phishing pages and benign decoys in publicly readable blob containers under the .blob.core.windows.net domain. This infrastructure is often considered trustworthy by browsers and security tools because it is Microsoft-owned and served over valid TLS. By delivering phishing content directly from these domains, adversaries can effectively bypass URL and certificate-based detections, increasing the likelihood of tenant credential and token theft.
In conclusion: make no assumptions based on the fact that the domain belongs to Microsoft (Azure Cloud); clear your cache and the Avast alert should disappear.
Hi,
I browse only with Firefox and use no other browser.
And in FF I don’t store cookies, browser history, passwords or anything else. Everything will be deleted when I close the browser (yes I am that paranoid).
