Wave Browser

[ITGURU]

We run the basic version of malwarebytes which scans machines daily and reports and detections.

We're seeing an increase in the number of WAVE BROWSER detections.

Its proving difficult to find out how/why we are receiving these. Speaking to the users they say they've not noticed anything different , but can only take their word for it.

Not sure if anything else has had this, or how I can find the source at the exact time as doesnt report immediately,

[Michael]

I've seen this previously and it lives in the: C:\Users\%username%\Wavesor Software directory.

 

You can't block it as a Google extension (via GPO) as it's not an extension.

[Koldov]

Can't help much but a couple of weeks ago our FSRM alerted that a pupil had tried to save 'Wave Browser.exe' to their user area...

 

I Googled it and saw the first few hits were malware related, so emailed the teacher (same as you the alert was a bit late so couldn't catch them on the machine to look through recent history). But I emailed the teacher anyway to have a word and basically remind them 'Big Brother is watching you'...

 

The pupil in question denied everything of course... I guess I should have looked through the filtering logs to see if I could find out where it came from, but FSRM did its job and it hasn't happened before or since so I let it go.

 

Maybe it's the latest 'thing' for the kids and they're sharing it around as a way to 'Hack the System'?

[TechMonkey]

We have had a few members of staff fall victim to this. Again deny installing anything. Unfortunately it was on InTune laptops that were (not) setup before I joined. Something seems to be going round but not had time to look into it deeply, mostly putting it down to users not reading what they are clicking.

[ITGURU]

Thanks, have now blocked the download and urls so hopefully wont be any more instances.