Who can I report this security issue to?

Eryngo

Today I was working on attaching sources to a family, and suddenly BitDefender (a program on my laptop for safegarding against malware) popped up saying it was blocking installation a dangerous page. See screenshot. It's a very weird URL that it blocked. I tried emailing na@familysearch.org, but the email got rejected (not bounced). How can I report this? It seems serious and could potentially harm other users.

ketherin - c

Thank you for reporting this. We have escalated the concern. (Yes, I am employee who works with the engineers.)

gary_noble

Also been getting multiple warnings, one was on the login page...

ketherin - c

Please let us know if the detection is through any other program than BitDefender.

Brent3861

Infected web page detected

7 minutes ago

Feature:

Online Threat Prevention

We blocked this dangerous page for your protection:

https://www.familysearch.org/Hemlock-Night-Gosper-this-go-this-Famids-not-of-

Threat name: GT:JS.Hyena.3.41E1D655

Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

=====

I have cleared my cache.

Brent3861

I see it on Bitdefender too.

Brent3861

Bitdefender is researching if this is a false positive.

Paul W

I just got this warning, too.

@ketherin - c and @Brent3861 - would by grateful for any responses from FS engineers or Bitdefender, respectively.

ketherin - c

Unfortunately, this is not something FamilySearch can directly resolve. It has been escalated up to some other support teams including BitDefender's.

Maile L

Mod note: I merged two discussions on the same topic which required removal of a nonfunctional link.

Becky Thames-Simmons

I was having this problem too, for quite some time. Yesterday, I cleared my Chrome cache of everything (history, cookies, absolutely everything) and the Bitdefender warnings stopped.

The other thing that was happening also stopped: I was using the new AI search feature, and every-single-time I'd click to open an image, I'd get a message that the image cannot be displayed - but only in Chrome, when I switched to Firefox it was fine. Again, after I cleared my Chrome cache of absolutely everything, it all cleared up and now it works just fine.

Eryngo

For what it's worth, I use MS Edge browser and the Duck Duck Go search engine. I have not cleared my cache, but will do so later this afternoon and see what happens. I've been getting the Bitdefender warning daily, but randomly.

Frank Foulkes

Also been getting these reports from Bitdefender, only difference being the last part, mine reads: GT:JS.hyena.3.BFB7D2B8

Using the most up to date version of Chrome Browser (123.0.6312.106)

Have done a full scan with Bitdefender and it comes up clean. Ran the Junkware Removal Tool from the Bleeping Computer site and it identified and deleted two BHOs but forgot to note the details.

Tested this site using the MS Edge Browser and over a couple of hours use there were no Bitdefender pop ups with a warning message. My wife then signed in to her regular site using the Chrome Browser and within 2 minutes Bitdefender popped up a warning with a near identical message to that which appears in the first post. That suggests to me that this is a Chrome Browser problem rather than a FamilySearch problem.

I will try clearing the cache as suggested above to see if it makes a difference.

ketherin - c

When was your most recent notification? Have you received any after April 14th?

Paul W

@ketherin - c

No Bitdefender message since last reported, in my case. Issue hopefully resolved. Thank you for giving this your attention.

Eryngo

My last experience of it was last Thursday.

Frank Foulkes

Same as others no further pop ups from Bitdefender and I notice the Chrome browser has been updated since 13 April. I'm now on version 123.0.6312.123.