Malware - Auckland City rates

Forums › Desktop computing › Malware - Auckland City rates

mdav056

616 posts

Ultimate Geek
+1 received by user: 160

Subscriber

#312620 1-May-2024 22:00

I got my email rates assessment but MalwareBytes will not let me click on anything in it because of riskware --

Website blocked due to riskware Website Blocked: tracking.solutiondynamics.com

v2.6.25 | Riskware: 2.0.202404302137

Malwarebytes Browser Guard blocked this page because it may contain malicious activity. --and I can't even report this to AC from their email for the same reason.

Does anyone else get this? It's extremely annoying.

gml

mentalinc

3384 posts

Uber Geek
+1 received by user: 1023

Trusted

#3225258 1-May-2024 22:04

Auckland Council <noreply@rates.aucklandcouncil.govt.nz>

Are you sure it's now spam?

I can't see that URL mentioned in the message headers or the body of the email or in the attachment...

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225260 1-May-2024 22:05

Did you confirm it's a valid email from a known sender?

You might have to contact Malwarebytes and see if it's a false positive but seeing this domain is used for mass email. It's quite possible it was used for malware distribution at some point, but it will be tricky to remove it from their list.

You should also contact the council and report it saying some users may not be able to act on it.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Linux

12182 posts

Uber Geek
+1 received by user: 8476

Trusted

Lifetime subscriber

#3225262 1-May-2024 22:05

Why would you want to report it to AC if Malwarebytes is reporting it as a false poitive? If you believe the email is legit then disable Malwarebytes

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225263 1-May-2024 22:08

Linux:

Why would you want to report it to AC if Malwarebytes is reporting it as a false poitive? If you believe the email is legit then disable Malwarebytes

How do you know it's a false positive? Per my previous reply, the AC may not be distributing malware, but the domain may have been used for that before, so Malwarebytes will flag it, regardless of who the sender is.

So the OP can either

Risk and allow the domain (easy) or
Get Malwarebytes to remove it from the list (hard)

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#3225609 2-May-2024 17:54

Doesn't sound like a false positive to me, look at the domain.. It's a tracking site, I'd _expect_ it to be blocked, I quite often find my privacy blocking tools prevent email URL's being opened because companies like to redirect everything through tracking sites.

I'd complain to AC and tell them to stop using email tracking.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225627 2-May-2024 18:29

Tracking itself is not a problem. Marketing uses it all the time - how would you measure the effectiveness of a campaign if you don't know how many people opened an email, or clicked a link.

This is not marketing though, so it's stupid to track. It's a transactional email - if the recipient opened or not, too bad. You don't need metrics on "how many people opened a rates email".

No, I don't think Malwarebytes should block the domain for being used for marketing purposes.

It's ok to block if people used it before to distribute malware.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

HP

Shop now for HP laptops and other devices (affiliate link).

mdav056

616 posts

Ultimate Geek
+1 received by user: 160

Subscriber

#3225714 2-May-2024 22:03

thanks @freitasm, I have reported back to AC and explained my problem. I also suggested that they wouldn't be wanting to train people to click through warnings like the one I got.

gml