Forum Discussion

CyberCop2023's avatar
CyberCop2023
Copper Contributor
Apr 20, 2023

Trojan:HTML/Phish.JS9

Had 67 detections of Trojan:HTML/Phish.JS9 over 2 days from C:\Users\***\AppData\Local\Microsoft\Windows\INetCache\IE\6JGSCFQJ\authorize[1].htm. Have tried to "collect file" but am being constantly a...
SMski1800's avatar
SMski1800
Copper Contributor
Apr 21, 2023

Chuck_Vidal Any update from Microsoft? We are seeing the same.

 

Thanks!

Chuck_Vidal's avatar
Chuck_Vidal
Copper Contributor
Apr 24, 2023
Yeah. Got confirmation this was a false positive and latest sigs should take care of this.
  • ralph1605's avatar
    ralph1605
    Copper Contributor
    Oct 31, 2023
    i'm seeing this on one of our customer devices and it's communicating via ip 152[.]199[.]23[.]37, upon researching, not much further details on ip and not quite sure if virustotal comments is legit about this ip which is related to phishing. how can i raise this to microsoft for verification? kindly advise. thanks.

Resources