Hi,
our clients with Intercept-X managed by Sophos Central can still open links to a pishing site.
I'm trying this with the image file on the site listed below: huuybaddyt7swehjgeq/Drive/images/0.jpg
no warning, no block, no log in central. Quite useless.
The only thing thats warns me is google safe search in firefox.
Sophos Support is playing man in the middle between me and Sophos labs.
The site reported hxxp://coloso[.]co - is a business site whose one of the hosting directory (hxxp://coloso[.]co/huuybaddyt7swehjgeq) is compromised and it was hosting phishing content.
We have blocked this URL hxxp://coloso[.]co/huuybaddyt7swehjgeq which will eventually block all it's child URL including hxxp://coloso[.]co/huuybaddyt7swehjgeq/Drive/images/0.jpg will be blocked.
Case 03552330
How can it be that this expensive product is still not protecting us from this known threat?
At least our XG is now finally detecting it as Pish but our remote workers are unportected.
This thread was automatically locked due to age.