Sophos UTM Advance Threat Protection

[Uber22]

Hey

 

has any seen a spike in there ATP notifcations, i have had around 80 emails from our utm with.

 

Advanced Threat Protection

 

A threat has been detected in your network The source IP/host listed below was found to communicate with a potentially malicious site outside your company.

 

Details about the alert:

 

Threat name....: C2/Generic-A

Details........: http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/C2~Generic-A.aspx

Time...........: 2019-04-04 14:21:41

Traffic blocked: yes

 

Source IP address or host

 

 

i have logged it with sophos guy said its Microsoft windows updates >

[tomearnshaw]

Snap, avalanche of emails from around 15:00 this afternoon, seems to have tailed off now...

[Uber22]

Just got this after reporting it to them.

 

Bloody crapped my self thought something was going down 😂

 

Hello,

 

This has been identified as a bug now. This should be resolved within the next few minutes with a new pattern update

 

Regards,