- Posts
- 10,813
- Posts Power
- 10,813.0%
- Liked
- 890
- Joined
- Jan 2, 1996
- Website
- inviteshop.us
It looks like Microsoft SharePoint can now scan password-protected ZIP files according to Andrew Brandt L, a Principal Security Researcher at Sophos. Brandt discovered the new change recently when their malware-containing password-encrypted files were scanned by Microsoft 365 virus detection engine.
On their Mastodon profile, Brandt wrote:
While Brandt acknowledges that this move is not at all a bad thing as it is targeted at threat actors who are looking to get away using this bypass, they appear to be a bit annoyed at the change as sharing malware samples with other threat researchers can be, at least, somewhat slightly hampered by this.
The official Microsoft documentation for Built-in virus protection in SharePoint Online explains:
Meanwhile, Microsoft also has the option to enable Safe Attachments in SharePoint. The support article says:
However, neither of the articles seem to mention anything related to scanning encrypted or password-protected files. This means it could be something Microsoft quietly rolled out recently.
On their Mastodon profile, Brandt wrote:
While Brandt acknowledges that this move is not at all a bad thing as it is targeted at threat actors who are looking to get away using this bypass, they appear to be a bit annoyed at the change as sharing malware samples with other threat researchers can be, at least, somewhat slightly hampered by this.
The official Microsoft documentation for Built-in virus protection in SharePoint Online explains:
Meanwhile, Microsoft also has the option to enable Safe Attachments in SharePoint. The support article says:
However, neither of the articles seem to mention anything related to scanning encrypted or password-protected files. This means it could be something Microsoft quietly rolled out recently.