TLS/SSL Stripping Risk

[RedK84]

My antivirus network inspector is showing that my sky broadband is at risk from a "man in the middle" - TLS/SSL attack and that the best fix is a firmware upgrade - I cant get anywhere with an assistant on resolving this problem - how do I fix this threat as it makes any device wiuthout a VPN unusable

[TimmyBGood]

---

@RedK84 wrote:

My antivirus network inspector is showing that my sky broadband is at risk from a "man in the middle" - TLS/SSL attack

You're the second person to report this recently, but it's perhaps worth noting that AV products can tend to  seriously overstate such risks in order to justify their own existence.

and that the best fix is a firmware upgrade - I cant get anywhere with an assistant on resolving this problem -

For any current* Hub model, updates are pushed out by Sky: there aren't any user-applied downloads.

how do I fix this threat as it makes any device wiuthout a VPN unusable

That's extremely unlikely unless you've seriously upset a hostile state security agency or similar adversary: for such a vulnerability to be exploited the attacker needs to be either in wireless range (and convince you to join a bogus WiFi network) or actually within your own cabled network perimeter.

---

* In-support models are the Sky Broadband Hub, Max Hub and Gigafast+ Hub. 

Theoretically the Q Hub has just gone out of support.

[TimmyBGood]

---

@RedK84 wrote:

My antivirus network inspector is showing that my sky broadband is at risk

---

Which AV product is this?  It helps to know, so that Sky has the option to liaise with the company which produces it.

[RedK84]

Hi, 

Thank you - this is really helpful

It's AVG though a guest uses Nord and it flagged on their mobile too. 

On my desktop Antivirus things are appearing OK but I am now quite nervous that this is more than a false positive on a mobile app

Cheers

Steve

[Stacks02]

Hello,

I have received the sane notification via my AVG wi-fi scan. 

I am less concerned now that this is being reported elsewhere.

GC

[Hayley1614]

My avg saying that theres a man in the middle on my Internet plus I've just gone onto pay for something and comes up with malicious site but it not sone one trying to hack in

[Sharcuk]

@Hayley1614 There was a forum post last week on the same subject, I don't know if it helps!

https://helpforum.sky.com/t5/Broadband/TLS-SSL-Stripping-Risk/td-p/5192792

[TimmyBGood]

---

@Hayley1614 wrote:
My avg saying that theres a man in the middle on my Internet 

---

Perhaps worth noting that 'at risk' is very different to there actually being a hostile action in progress.