Saw a URL get blocked in EC and after investigation found its caused by malware/spyware BUT
So I recently saw our EC web event log several hits for *.symcb.com and after I googled symcb.com along with Sophos I found several infections that talked about it attempting to make web connections to this domain. So I first went to all the machines…
DNS Records for: api.dropbox.com.uri.vir2.sophosxl.com
I'm seeing DNS entries for the following address: api.dropbox.com.uri.vir2.sophosxl.com
Anyone know what this is going to?