[LINK] Microsoft One Drive

[David]

On 17/08/2023 19:15, Stephen Loosley wrote:
> Yes, thanks Karl, it does seem an email malware attack, despite having McAfee protection, is indeed very possible.
Possible, yes, however I wonder why any self-respecting actor with malicious intent would delete uninteresting files from three directories in alphabetical order of directory-name (under /Documents/G* in my case) and apparently leave everything else?  Why not delete the lot?

When I ran the malware scanner over my account it turned up 12 infected files, all diagnosed with "Phishing.Email.SpoofedDomain FOUND". 

However six instances were duplicates of the other six, all were delivered between 2016 and 2021 long before this issue occurred, and none were ever in my email client or in the emptied directories: they were addressed to/from another user in an earlier build of this system.  I think all had been virus-checked by my ISP at the time too.

So I'm pretty sure they're false positives.  It sounds to me more like a bug where a programmer erred in their default directory, or simple human error by me.  I suppose we'll never know.  I'll delete all files from the quarantine directory and get on with my life - I've wasted too much time already!

_David Lochrin_