Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Martin_Hofbauer
Contributor
Contributor

E87.31 (File Reputation) detects latest Bitwarden update (2023.8.3) as malicious

Windows Desktop Client Update from Bitwarden password manager is detected as "malicious" and was quarantined.

Windows 22H2

Endpoint Security Client E87.31
( including following blades: Anti-Bot and URL Filtering, Anti-Malware,Compliance, Anti-Ransamwae, Behavioral Guard, FDE, TE and Anti-Exploit, RA VPN)

Replication is easy: Download Windows App: 
https://vault.bitwarden.com/download/?app=desktop&platform=windows

Check Point File Reputation popup appears and informs, that download file was quarantined

It is detected as "Trojan" with malware family "ca12MJdg"

UPDATE: Just checked with Virustotal and CheckPoints Online TE Scanning service (https://threatpoint.checkpoint.com/ThreatPortal/emulation), both does NOT show any issue with that file.


Have some else the same experience ?

Thank you
Martin

0 Kudos
2 Replies
Chris_Atkinson
Employee Employee
Employee

Please report this to TAC Support if not already and they will handle it.

https://help.checkpoint.com 

CCSM R77/R80/ELITE
0 Kudos
Martin_Hofbauer
Contributor
Contributor

For me it is too much effort to report a false positive result by opening an SR. Why isn't there an easier way?

BTW: Bitwarden for Windows Version 2023.8.4 is out , and there is no "Trojan" alert any more


0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events