Avast Network Scan shows a compromised password

Question

Level 1

47 points

Avast Network Scan shows a compromised password

I'm not sure if this is the right part of Community to ask this, but it's related to network audio devices and AirPlay.

I own an Onkyo stereo receiver model TX-8260 that supports wi-fi connections. When doing the inital setup it simply required registering to my iPhone SE (1st gen) as a new AirPlay speaker. Apparently this allows the receiver to get the wi-fi information it needs. Non-IOS users instead have to enter via the remote control the login information for the network. So I followed the instructions for using an iOS device and it has been working fine for the 3 years that I've owned the receiver.

I recently installed the free version of Avast Security, an antivrus/malware app, on my MacBook Air (2020, M1, 16GB RAM, 1TB SSD, MacOS 12.6.6). When I performed a network scan for the first time, it indicated that there was problem with the receiver. The scan found all the other devices on the network (computers, phones, Apple TV, Canon printer, Synology NAS, Verizon router and a Lenovo "smart" alarm clock) to be secure.

The error message read "The password for this device was compromised in a data leak and is now available online for anyone to use". It then prompted me to log into the receiver by it's network address using a username and password. There is nothing in the receiver's user manual about setting up a username and password, so I can't log in and change the supposedly compromised password.

I thought perhaps I need to run the initial setup with an iOS device again, which would entail removing the receiver as a AirPlay speaker and then add it as a new one. I can't find anything on the iPhone that would allow me to do this.

I'd appreciate any suggestions people have about this.

I will also be contacting Onkyo tech support.

Thx,

Brian

Earlier iPhone models

Posted on May 24, 2023 8:02 AM

Reply

Answer 1

mudbucker Author

Level 1

47 points

May 24, 2023 10:23 AM in response to SravanKrA

I waded through some help pages at the Onkyo website and aparently the browser interface for the unit does have a username and password. There is a generic user name loaded at the factory and I have verified it's still there...the unit can display all the network settings (network name, SSID, IP address, etc.) on it's front panel display. As I wrote above, using an iOS device (my phone) to setup the network required zero manual entry from me.

The stranger part is that the factory default password is...um, nothing. It's blank, according to the unit's display. That makes it impossible to log in. It does indicate on the display that it is an "AirPlay password" so what password might that be referring to? The Wi-Fi password? Apple ID password? My phone login code?

Still waiting for a response from Onkyo support.

Thanks for the reply.

Reply

Answer 2

May 24, 2023 8:28 AM in response to mudbucker

mudbucker wrote:

The error message read "The password for this device was compromised in a data leak and is now available online for anyone to use".

You get this message when you have used the same password on multiple apps and/or websites. It does not necessarily mean there already was a leak. It is suggesting a probability of password leak.

To address this issue, it is crucial to take immediate action. Here are some recommended steps:

Start by changing the password associated with your Keychain. This helps ensure that the previous compromised password can no longer be used to access your Keychain's stored information.
Since the compromised password could be used to gain unauthorized access to other accounts, it is advisable to update the passwords for your other online accounts as well. This helps prevent potential unauthorized access to those accounts.
Enable 2FA for your iPhone and any other accounts that support it. Two-factor authentication adds an extra layer of security by requiring an additional verification step, typically a temporary code sent to your trusted device, along with your password.
Keep an eye on your accounts and devices for any signs of suspicious activity. If you notice any unauthorized access or unusual behavior, report it immediately and take appropriate action, such as contacting Apple Support or changing your passwords again.
Going forward, ensure that you use strong, unique passwords for each of your online accounts. Consider utilizing a reputable password manager (iCloud Keychain) to generate and securely store your passwords.

Remember, taking prompt action and maintaining good password hygiene can help mitigate the risks associated with a compromised password and protect your online accounts and personal information.

Reply

Avast Network Scan shows a compromised password

Similar questions