Hacked files

%3CLINGO-SUB%20id%3D%22lingo-sub-2670482%22%20slang%3D%22en-US%22%3EHacked%20files%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2670482%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20day%2C%3C%2FP%3E%3CP%3EI%20have%20done%20alot%20of%20reading%20on%20how%20to%20clean%20up%20my%20Sharepoint%20and%20it%20is%20not%20successful.%20I%20deleted%20these%20hacked%20files%20from%20my%20mobile%20app%20by%20deleting%20the%20file.%20When%20I%20go%20back%20into%20my%20Sharepoint%20folder%2C%20the%20hacked%20file%20is%20back.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20saw%20on%20my%20%22Sign%20Ins%22%20that%20the%20hacker%20logon%20successfully%20from%20another%20country%2C%20I%20changed%20my%20password.%20Did%20the%20deleting%20again%20with%20the%20mobile%20app%20and%20still%20unsuccessful.%3C%2FP%3E%3CP%3ECan%20I%20load%20a%20antivirus%20app%20onto%20Sharepoint%3F%20I%20looked%20at%20the%20Defender%20365%20but%20can't%20get%20it%20linked%20to%20my%20Sharepoint.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help%3F%3F%3F%3C%2FP%3E%3CP%3ENatasha%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2670482%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EHacking%20or%20Malware%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

Good day,

I have done alot of reading on how to clean up my Sharepoint and it is not successful. I deleted these hacked files from my mobile app by deleting the file. When I go back into my Sharepoint folder, the hacked file is back. 

I saw on my "Sign Ins" that the hacker logon successfully from another country, I changed my password. Did the deleting again with the mobile app and still unsuccessful.

Can I load a antivirus app onto Sharepoint? I looked at the Defender 365 but can't get it linked to my Sharepoint.

 

Please help???

Natasha

 

1 Reply
Hi Natasha,

First thing you should do is enable MFA on the accounts to prevent the session logins.

It may also be worth checking to see if the Sharing Policy for the site allows anonymous links. If it does then anyone with the link could potentially upload files into the library.

This article has information about Defender that may also help
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/mdo-for-spo-odb-and-team...