We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
Avast blocks opening Dropbox Web site from the application
When trying to launch the Dropbox Web site, from the icon of the application, Avast blocks it identifying it as phising (see attached image).
It happens also when trying to reach Dropbox from t...
Hey again Debby M., thanks for nudging us here.
As Rich mentioned previously, this is a false positive. This can occur when an application is incorrectly flagged as malicious due to an overly broad detection signature or algorithm used in an antivirus software.
In any case, rest assured, the official Dropbox desktop app isn't a phishing attempt and our team is further looking into this matter.
If you have any other concerns, we are always here to assist. Hope this helps to some extent!
when opening dropbox.com through the dropbox icon Avast gives a warning about a phishing file. Dropbox.com will not open. I tried this on 3 computers. Every attempt give a different filename. The treat stayes the same: HTML:PhisingDpx-CS[Phish]. There is no warning when opening dropbox.com through the browser.
System: Windows 10 / dropbox version 84.4.170 / Avast free version 19.8.2393 - 18.8.4793.544.
Is this a phishing file in the dropbox app? Is it a false warning by Avast?
Same issue on Mac OS
Dropbox: v85.3.138
Avast: v14.2 - Virus definitions: 19110302
Mac OS: 10.14.6
This is ridiculous. Dropbox's answer is disingenuous (I am trying to be gentle here). The point is not whether the infected file comes from Dropbox's website, but whether it is generated by Dropbox's local application. I quote:
That file isn't from the Dropbox website. When you use the icon in the Dropbox app to visit the website, the app directs you to a locally generated HMTL file which then redirects to the Dropbox website.A "locally generated file redirecting to the Dropbox website" is generated by WHICH PROGRAM, if not by the Dropbox local application? That's the key issue. If the app itself is compromised, Dropbox is criminally negligent not to warn its customer base about it. The simplest explanation is that either the Dropbox site or the Dropbox app has been compromised; either the Dropbox access page contains a phishing program, or the link to it has been modified so that it downloads a phishing program. If neither the app nor the website are the real origin of the phishing file, then one needs to postulate a Mac process which would hijack specifically the link between the Dropbox app and the Dropbox website, on various computer systems, and nothing else that Avast can see. I am not a tech person, but logically I don't quite understand how this turkey can fly without the dropbox local app being involved in some way.
And whatever the solution, I don't see why we should turn Avast off so as to bypass the warning. Avast flags a phishing program, which is not something to be taken lightly. I am willing not to jump to conclusions only if Dropbox offers another suggestion. But the answer given to Debby M. as per her post above is beyond dumb. We are supposed not to block our computer from downloading a flagged phishing program? Seriously??? That's not support, that's sabotage...
I will give Dropbox another 48 hours. But if nothing happens, I will just erase my account and go to some other cloud service. With regret, because it was a nice little app.
Hi plg, you may find this is sorted now. I've been following this thread since my whole company is having the same problem - all at the same time! Doesn't differentiate between Mac or PC, or what kind of antivirus software - none of us could open the dropbox online from the app without getting a phishing warning. So I just checked and it's back to normal without getting scooped up as a phishing attempt by AVG.
My guess is Dropbox have had a very stressful weekend/Monday scrambling to fix this issue.
>flomaka
Thanks for the tip! The fact that it was not Mac or PC specific confirms that it was a Dropbox issue, probably in the local application, at least if Dropbox was right in telling us that their website was clean... Some update which was compromised somehow, maybe? However, if their local application was compromised, it potentially still is and I don't want to risk reinstalling it if Dropbox does not confirm that the problem is solved —and at this point they won't even confirm that there was a problem. I did send the files to Avast for analysis, and I assume they will check them, so we may have some news from them. Will see! Thanks anyway.
