Malware - Auckland City rates

Forums › Desktop computing › Malware - Auckland City rates

mdav056

607 posts

Ultimate Geek

Subscriber

#312620 1-May-2024 22:00

I got my email rates assessment but MalwareBytes will not let me click on anything in it because of riskware --

Website blocked due to riskware Website Blocked: tracking.solutiondynamics.com

v2.6.25 | Riskware: 2.0.202404302137

Malwarebytes Browser Guard blocked this page because it may contain malicious activity. --and I can't even report this to AC from their email for the same reason.

Does anyone else get this? It's extremely annoying.

gml

mentalinc

3237 posts

Uber Geek

Trusted

#3225258 1-May-2024 22:04

Auckland Council <noreply@rates.aucklandcouncil.govt.nz>

Are you sure it's now spam?

I can't see that URL mentioned in the message headers or the body of the email or in the attachment...

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

freitasm

BDFL - Memuneh
79287 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225260 1-May-2024 22:05

Did you confirm it's a valid email from a known sender?

You might have to contact Malwarebytes and see if it's a false positive but seeing this domain is used for mass email. It's quite possible it was used for malware distribution at some point, but it will be tricky to remove it from their list.

You should also contact the council and report it saying some users may not be able to act on it.

Linux

11428 posts

Uber Geek

Trusted

Lifetime subscriber

#3225262 1-May-2024 22:05

Why would you want to report it to AC if Malwarebytes is reporting it as a false poitive? If you believe the email is legit then disable Malwarebytes

freitasm

BDFL - Memuneh
79287 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225263 1-May-2024 22:08

Linux:

Why would you want to report it to AC if Malwarebytes is reporting it as a false poitive? If you believe the email is legit then disable Malwarebytes

How do you know it's a false positive? Per my previous reply, the AC may not be distributing malware, but the domain may have been used for that before, so Malwarebytes will flag it, regardless of who the sender is.

So the OP can either

Risk and allow the domain (easy) or
Get Malwarebytes to remove it from the list (hard)

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#3225609 2-May-2024 17:54

Doesn't sound like a false positive to me, look at the domain.. It's a tracking site, I'd _expect_ it to be blocked, I quite often find my privacy blocking tools prevent email URL's being opened because companies like to redirect everything through tracking sites.

I'd complain to AC and tell them to stop using email tracking.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

freitasm

BDFL - Memuneh
79287 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3225627 2-May-2024 18:29

Tracking itself is not a problem. Marketing uses it all the time - how would you measure the effectiveness of a campaign if you don't know how many people opened an email, or clicked a link.

This is not marketing though, so it's stupid to track. It's a transactional email - if the recipient opened or not, too bad. You don't need metrics on "how many people opened a rates email".

No, I don't think Malwarebytes should block the domain for being used for marketing purposes.

It's ok to block if people used it before to distribute malware.

mdav056

607 posts

Ultimate Geek

Subscriber

#3225714 2-May-2024 22:03

thanks @freitasm, I have reported back to AC and explained my problem. I also suggested that they wouldn't be wanting to train people to click through warnings like the one I got.

gml