Microsoft 365 Quarantining Emails with Agent Installer link as Malware

SteveA
SteveA Member Posts: 2 ✭
edited March 2024 in Helpdesk

Edit:

I see I have put this in the wrong discussion topic ::DOH::

If an Admin would kindly move it for me :)

Good morning all

We have just found an issue whereby Microsoft 365 default malware policy is quarantining emails we send that contain the link created for Agent Installers.

RMM Issue.png

We can release our end but in turn this is quarantined by the recipients tenant.

Now we are aware, we can mitigate for this but has anyone else had this problem? For us it seems to have only been in the past 4 weeks.

Any advice would be appreciated.

Tagged:

Comments

  • even
    even Member Posts: 1 ✭

    We are also seeing this problem.

  • SteveA
    SteveA Member Posts: 2 ✭

    hi Even. Thanks for confirming we are not alone! my post is in the wrong place and admin not moved it yet so I think will repost this. That may be why we’re not getting any more traction.

  • Sarah_from_Atera
    Sarah_from_Atera Member Posts: 93 ✭✭✭

    Hey @SteveA , Sarah from Atera here.

    I just moved your post :)

  • cybersafe
    cybersafe Member Posts: 1 ✭

    Currently testing Atera. We're also experiencing this issue. Found we can avoid the outbound quarantine (MS365) by using bitly to shorten the link, but it is still getting classified as spam by our test gmail account. Haven't tested against a separate MS tenant yet.

  • Sarah_from_Atera
    Sarah_from_Atera Member Posts: 93 ✭✭✭

    Hey @cybersafe , Sarah from Atera here.

    Please open a ticket with our support if there is still an issue with the M365 quarantine and Atera.

    They should be able to assist you.

  • warren
    warren Member Posts: 1 ✭

    email from MS.jpg

    We have the same problem now two weeks without resolution

    If you send the link in an email google quarantines the email

    We had a direct link to the msi file for download on our website and also a link to the agent on atera website for download.

    As a result we can not send or receive any mail to any one of our clients hosted with Microsoft or gmail

    Our website has been black listed and we have had to remove all the links from our website this problem has been ongoing for 2 weeks yet we have had this set up on our website more than 4 years no issue

    Any email that has any refrence to the domain name even not thelink has been quaranteened

    We have been in contact with ATera support with no resolution also microsoft have taken nearly two weeks to try and fix this

Topics