Jump to content
lvl1k0n

Chrome is attempting to access my webcam when visiting a banking URL

Recommended Posts

I use ESET and am getting webcam access alerts when I visit either chase.com or discover.com. Why am I getting webcam access requests when ONLY accessing these two websites?

I recently installed a Ubiquti Switch and Synology NAS into my network.The NAS has not yet been connected to the internet for outside access as far as I know. It is just connected locally on my network. Both have since been unplugged and I am still getting the requests for webcam access.
 
Could my system be infiltrated or infected? 

Untitled.png

Edited by lvl1k0n

Share this post


Link to post
Share on other sites

Thank you for the reply, itman. I looked further into the thread you linked and the following post by userlain may explain my issue:

On 10/2/2018 at 2:06 AM, userlain said:

This is annoying in Chrome too. A bunch of banking sites use libraries that make use of navigator.mediaDevices.enumerateDevices() and this causes the popup to trigger. Even if you block the request, the enumerateDevices() call still functions properly and metadata is still retrieved.

After reading his post, I attempted to access various other banking websites and found that the wellsfargo.com, citibank.com, and suntrust.com will also request webcam access. Interestingly, many other major banking websites do not request such access (or at least not via their main webpage).

This makes me wonder what does navigator.mediaDevices.enumerateDevices() have to do with webcam access, and why I only began experiencing this issue after installing a switch and NAS device. I'm paranoid about logging into anything on my computer now.

EDIT: It doesn't appear that I had any windows updates overnight, however ESET had an update at 2:06PM PST today (Oct. 13th). This would of been about the time I began experiencing my issue. It looks like Detection Engine was updated to 18210, Rapid Response module was updated to 13001, and Databases for advanced antispam module was updated to 1475. Just wanted to throw this out there in case it can help anyone identify the root of my issue.

Edited by lvl1k0n

Share this post


Link to post
Share on other sites

What you could do is temporarily set your default browser to IE11. This will result in Eset's BP&P opening in IE11. Navigate to the Chase and Discover web sites you noted previously. If you get no Eset web cam alerts, it can be assumed the issue is related to Chrome.

Why this web cam behavior appears to have started after your hardware changes, I really have no clue. I can't see how a NAS device would in any way influence web cam behavior.

Share this post


Link to post
Share on other sites

That is a good idea. I tried what you suggested with both IE11 and Firefox on the various banking websites, and get no webcam access requests. So its looking like Chrome is the likely culprit. Hopefully this is just some simple conflict between Chrome and whatever recent updates my computer got from ESET.

Unfortunately, I'm still paranoid  ?

The reason I brought up my NAS/Switch is to provide more information, and in case it could be a point of entry into my network. I did change some of the default security settings, like removing the default admin account, changing the default ports, and lowering login attempts so the NAS is likely not an issue.

Share this post


Link to post
Share on other sites

The conflict is coming from Chrome side after their recent update , well I think that both Google and ESET should release some patches to deal with the compatibility problem.

Share this post


Link to post
Share on other sites
On 10/14/2018 at 12:24 AM, itman said:

Suspect this might be related to Chrome web cam issues noted in this thread: https://forum.eset.com/topic/16852-smart-security-premium-webcam-access-notifications/?_

These won't be fixed until vers. 12 is released as noted by @Marcos.

This "bug" still persists in Eset v12 for me but only happens in the first time I go to my gmail after open Google Chrome and only get it again after close and open Google Chrome again and go to my gmail.

In v11 I was getting the webcam notification "bug" everytime I refresh my gmail page.

Just to let the moderators know I deleted the saved webcam rule that blocked Google Chrome access to the webcam after updating to v12 but got the notification that @lvl1k0n got again after I open Google Chrome and go to my gmail, so I blocked access again.

Is this "bug" gonna be fixed in a future Eset module update or we gonna have to wait for a Google Chrome update that fixes this "bug"?

Edited by razorfancy
v12 difference from v11

Share this post


Link to post
Share on other sites

Hello @lvl1k0n, Just to let you know, our development team analyzed the calls and the implementation on the websites you mentioned and came up with a fix for this issue that will be a part of a future application update.

Regards,
T.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...