MacBook Pro is receiving multiple threats for last two days

Viruses and worms
1

Hi everyone,

Avast One is alerting to multiple web threats for last two days on a MacBook Pro. not sure if this is related, but this happened right after a software update. I’ve tried closing all windows in safari, then deleting history, website data, library caches, and have looked at the launchers and launcher daemons in library. Nothing in system settings looks unusual either. Scans with both avast and Malwarebytes show nothing. Can’t figure this one out. here’s the details from the last 8 avast alerts over the last two days. I had to change the websites from https to htp to adhere to avasts posting rules

First One:

Threat name: URL:Blacklist

Severity: 2

Threat type: Miscellaneous

Website: htps://countdownpro.top/api/1895coffee.myshopify.com/bars.json

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Second one.

Threat name: URL:Blacklist

Severity: 2

Threat type: Miscellaneous

Website:htp://www.thepoolcalculator.com/

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Third one

Threat name: URL:Phishing

Severity: 2

Threat type: Phishing

Website: ….htp://gateguruapp.com/

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Fourth one

Threat name: URL:Blacklist

Severity: 2

Threat type: Miscellaneous

Website: htp://www.world-challengetv.com/

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Fifth One:

Threat name: URL:Phishing

Severity: 2

Threat type: Phishing

Website: htp://fairweatherroofing.net/

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Sixth:

Threat name: URL:Agent-AC [ScamT]

Severity: 2

Threat type: Technical support scam

Website: htps://stingray-app-n99th.ondigitalocean.app/script.js

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Seventh:

Threat name: URL:Blacklist

Severity: 2

Threat type: Miscellaneous

Website: htp://yfdpco7.com/sk-park.php

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

number 8:

Threat name: URL:Botnet

Severity: 2

Threat type: Bot

Website: htp://www.hanamaui.com/north-of-hana-town/

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Ninth:

Threat name: URL:Botnet

Severity: 2

Threat type: Bot

Website: htp://www.hanamaui.com/favicon.ico

Process: /System/Volumes/Preboot/Cryptexes/App/System/Applications/Safari.app/Contents/MacOS/Safari

Detected by: Web Guard

Status: Threat blocked

Thanks in advance!

2

Do you have any browser add-ons or extensions?
Check if any you do not recognise and disable them.
If problem persists disable each and test.

3

thanks for the reply rocksteady. The only extensions on safari are adguard ad blocker. its been on there for a while with no issues. Any other suggestions? thanks,

4

Is it just using Safari browser triggering those alerts.
Do you have another webbrowser to try?

Note I am not an Avast Team memeber, just another user. Also I do not have a Mac and also do not run AvastOne, so my assistance is limited.

There is a separate Avast One / Mac sub-forum: Avast One for Mac - Avast Community
but when I just looked, I do not see a great deal of activity or replies to questions posted there.