Hi,
Seeing this on our firewall for a few users.
"sync.console.adtarget.com.tr"
Firewall lists it as malware, threat name CnC, detect method infected 192.168.0.1 domain. It appears to be tracking perhaps? Anyone familiar with it? I am pushing full antivirus 10.0.0.1 scan on all systems, and ran malwarebytes on at least one system that was detected with this, and scans 192.168.l.l found nothing.
Thanks in advance for your help.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi decula,
according to FortiGuard it seems to be seen as advertising / general interest kind of sites since 2019.
At least their 3rd level domain check went this way.
Details in :
https://www.fortiguard.com/webfilter?q=adtarget.com.tr
Should you have any evidence about any malicious activities, kindly let us know.
Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1713 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.