Jump to content

MBAE detecting and blocking exploit code in Spotify


Recommended Posts

As the title states, MBAE for Business is detecting and blocking exploit code in Spotify. I just installed MBAE on the test system so this is the first run of the program. I have the latest version of both MBAE and Spotify. I've had no issues with Spotify in the past and MBAM and Symantec Endpoint Protection have not found anything malicious on the system or with Spotify.

 

Would this be a false positive? I'd rather not make an exception for Spotify so it can be protected in the event of a real threat. Furthermore, Spotify is installed on many machines in the company so it could prove to be a likely vector for exploitation.

 

I've attached the alert log for the event. Note: I did remove the username information.

archived-1892-mbae-alert.log

Link to post
Share on other sites

Hi Impervator.

 

Can you please attach or PM me a ZIP with the full contents of the MBAE data directory? Instructions can be found in the readme first link in my signature.

 

Also which Profile did you use for the custom shield for Spotify? I'm using the ChromeBrowser profile (since Spotify is basically a Chrmomium-based browser) and it is working OK.

Link to post
Share on other sites

Hi pbust,

 

I've sent you a PM with an archive of the mbae data directory. As for the profile, I had set it to use the 'mediaplayer' profile.

 

When looking through the profile list I only see a profile for 'browser' and not 'ChromeBrowser'... I assume that profile doesn't exist in the 1.05 version of MBAE (which is what I am currently running). I will upgrade to the newer 1.07 release of MBAE and recreate the custom shield with the profile you indicated. After which I will provide an update on the situation.

Link to post
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.