topic Re: E87.31 (File Reputation) detects latest Bitwarden update (2023.8.3) as malicious in Endpoint

E87.31 (File Reputation) detects latest Bitwarden update (2023.8.3) as malicious

Martin_Hofbauer — Sun, 10 Sep 2023 10:22:14 GMT

Windows Desktop Client Update from Bitwarden password manager is detected as "malicious" and was quarantined.

Windows 22H2

Endpoint Security Client E87.31
( including following blades: Anti-Bot and URL Filtering, Anti-Malware,Compliance, Anti-Ransamwae, Behavioral Guard, FDE, TE and Anti-Exploit, RA VPN)

Replication is easy: Download Windows App:
https://vault.bitwarden.com/download/?app=desktop&platform=windows

Check Point File Reputation popup appears and informs, that download file was quarantined

It is detected as "Trojan" with malware family "ca12MJdg"

UPDATE: Just checked with Virustotal and CheckPoints Online TE Scanning service (https://threatpoint.checkpoint.com/ThreatPortal/emulation), both does NOT show any issue with that file.

Have some else the same experience ?

Thank you
Martin

Re: E87.31 (File Reputation) detects latest Bitwarden update (2023.8.3) as malicious

Chris_Atkinson — Mon, 11 Sep 2023 06:28:37 GMT

Please report this to TAC Support if not already and they will handle it.

https://help.checkpoint.com

Re: E87.31 (File Reputation) detects latest Bitwarden update (2023.8.3) as malicious

Martin_Hofbauer — Mon, 18 Sep 2023 21:29:22 GMT

For me it is too much effort to report a false positive result by opening an SR. Why isn't there an easier way?

BTW: Bitwarden for Windows Version 2023.8.4 is out , and there is no "Trojan" alert any more