winstonsmith84 4 Posted November 8, 2021 Posted November 8, 2021 Eset keeps sending an alert on one machine in our network saying Module HTTP filter - Threat Alert triggered: hxxp://www.cassiopessa.com/assets/scripts/main.js?1460287547 contains JS/Adware.Agent.R application. The computer in question has no extensions installed in Chrome. The person using the computer says they aren't going to this website.
itman 1,807 Posted November 8, 2021 Posted November 8, 2021 (edited) 16 minutes ago, winstonsmith84 said: The person using the computer says they aren't going to this website. First, the link posted is a web page containing many scripts. Assume that whatever web site this person is frequenting is redirecting to this cassiopessa.com web site page. Edited November 8, 2021 by itman
itman 1,807 Posted November 8, 2021 Posted November 8, 2021 Here's an article on cassiopessa.com: https://www.pcrisk.com/removal-guides/8962-cassiopesa-com-redirect . Note: I do not recommend downloading anything from the above web site to remove this browser redirect.
Administrators Marcos 5,467 Posted November 9, 2021 Administrators Posted November 9, 2021 For a start please provide logs collected with ESET Log Collector from the machine in question.
Recommended Posts