Gamma.app - False positive report, lots of spam now taken down

[jamis0n]

Hi - I'm the co-founder of Gamma.app

One of our customers reported that MalwareBytes is now blocking our app.

We've taken down a lot of spam this week and are curious how to get unblocked.

[Porthos]

Seems to be a browser guard only block, Not blocked by premium.

@BjelakovicL@JPopovic@blender

 

Edited October 28, 2023 by Porthos

[jamis0n]

Yup, thats the same screenshot our user sent us.

We've taken down everything we've found so far, but I'm not sure how to re-request a review or scan from MalwareBytes.

[jamis0n]

I'm also curious if there are automated scanning tools that are commonly used in clientside or serverside code to flag malicious links and prevent them from being served in the first place.

We're deploying a "Report this content" mechanism today, but it would be great to be preventative/proactive rather than reactive.

[BjelakovicL]

Hi,

Thank you for reporting. This will be fixed in the next database update.

12 hours ago, jamis0n said:

Yup, thats the same screenshot our user sent us.

We've taken down everything we've found so far, but I'm not sure how to re-request a review or scan from MalwareBytes.

Here are a couple of more potentially malicious URLs:

gamma.app/public/Investor-Update-for-Elliott-Hartman-Agency-ynb7uh5ph8yvpur
gamma.app/public/This-is-a-secure-document-containing-sensitive-information-lymcsm1gz6mj1xk
gamma.app/public/Sharepoint-copy-njqewlehqwa3970
gamma.app/public/Soligenix-Inc-o3xaexsce0svzqs
gamma.app/public/File-q6vk7lp3o9jl4s1
gamma.app/public/This-is-a-secure-message-containing-sensitive-information-02x3dfbigfp2rj9
gamma.app/public/Request-for-Information-nbx7eu9upi4y8ie
gamma.app/public/Shared-document-e9pevmqvj4mmbyl

[jamis0n]

15 hours ago, BjelakovicL said:

Hi,

Thank you for reporting. This will be fixed in the next database update.

Here are a couple of more potentially malicious URLs:

gamma.app/public/Investor-Update-for-Elliott-Hartman-Agency-ynb7uh5ph8yvpur
gamma.app/public/This-is-a-secure-document-containing-sensitive-information-lymcsm1gz6mj1xk
gamma.app/public/Sharepoint-copy-njqewlehqwa3970
gamma.app/public/Soligenix-Inc-o3xaexsce0svzqs
gamma.app/public/File-q6vk7lp3o9jl4s1
gamma.app/public/This-is-a-secure-message-containing-sensitive-information-02x3dfbigfp2rj9
gamma.app/public/Request-for-Information-nbx7eu9upi4y8ie
gamma.app/public/Shared-document-e9pevmqvj4mmbyl

Thanks. These have been confirmed spam and taken down.