Anyone receive a false positive alert for ‘Mirai backdoor detected’?
I’ve had Defender for Endpoint flag a Windows machine for Backdoor:Linux/Mirai.Q!xp, but after investigating further - it appears to be a false positive. Automatic investigation returns the same conclusion.
In this case, it’s falsely flagged a diagnostic log file within appdata temp for Microsoft Word. I’ve seen this at two other clients I support this week (no cross-contamination), detected during scheduled full scan.
Anyone else had this recently? Just want to know if I’m not alone in this…thanks!