[sanesecurity] Re: False Positive

  • From: Sujit Acharyya-Choudhury <s.choudhury@xxxxxxxxx>
  • To: "sanesecurity@xxxxxxxxxxxxx" <sanesecurity@xxxxxxxxxxxxx>
  • Date: Mon, 11 Jun 2018 11:09:48 +0000

Thanks Steve.

Sujit

-----Original Message-----
From: sanesecurity-bounce@xxxxxxxxxxxxx <sanesecurity-bounce@xxxxxxxxxxxxx> On 
Behalf Of Steve Basford
Sent: 11 June 2018 12:00
To: sanesecurity@xxxxxxxxxxxxx
Subject: [sanesecurity] Re: False Positive


On Mon, June 11, 2018 11:27 am, Sujit Acharyya-Choudhury wrote:

We are getting standard report being blocked by this signature.


({HEX}php.malware.magento.609.UNOFFICIAL


This signature is from:

rfxn aka linux-malware-detect

See:

https://github.com/rfxn/linux-malware-detect/issues/280

In the mean time, I've whitelisted (in the next update) until they fix it.


-- 
Cheers,

Steve
Twitter: @sanesecurity


Attachment: smime.p7s
Description: S/MIME cryptographic signature

Other related posts: