search

facebookmicrosites / Open-Mapping-At-Facebook

Documentation for Open Mapping At Facebook
MIT License
180 stars 31 forks source link

Possible Malware #25

Closed andreweryan closed 1 year ago

andreweryan commented 1 year ago

Hello, I downloaded several files just now and Windows defender flagged the following files as a Trojan:Script/Wacatac.H!ml threat:

CO_mapwithai_road_data.gpkg.tar.gz VE_mapwithai_road_data.gpkg.tar.gz PE_mapwithai_road_data.gpkg.tar.gz

threat

tsmock commented 1 year ago

I wasn't able to reproduce using Microsoft Defender on Mac. Security intelligence version: 1.385.1495.0 (created on 2023-03-29T12:48:27Z).

You did download the data from https://github.com/facebookmicrosites/Open-Mapping-At-Facebook/wiki/Available-Countries right?

andreweryan commented 1 year ago

Yes, I downloaded from that link. I downloaded 6-8 files and Defender was raising those errors for 3 of the files I downloaded. I can try to download one again and see if it tries to block it again.

tsmock commented 1 year ago

You can try doing that, but maybe the MS Defender definitions are out of date on your machine?

andreweryan commented 1 year ago

I have the Security intelligence version: 1.385.1495.0 as well. I downloaded each of the 3 files again and 2 seem fine now but Defender is blocking and quarantining the Peru file immediately after download

andreweryan commented 1 year ago

I just downloaded the same file on my laptop and Defender did not find any threats... I guess its possible that Defender on my desktop is throwing a false positive for some reason. I'm closing this issue for now since it appears to be fine. Sorry for the scare!