MalwareBytes thinks SimpleNote published note site contains a Trojan

• 

  htreisman · Member · January 12, 2025 at 3:47 am

  • Copy link
  • Add topic to favorites

  I get the following message from MalwareBytes when I click on the link to one of my published notes.

  Website blocked due to a Trojan
  Your Malwarebytes Premium blocked this website because it may contain a Trojan.
  We strongly recommend you do not continue.

  I can get around this easily, but it will worry anyone else who tries to access my note. Or anyone’s.

  It seems that this is something that should be investigated.

  Thanks,
  Howard

• 

  staff-joey8 · Staff · January 15, 2025 at 1:03 pm

  • Copy link

  Hi @htreisman

  This is certainly a false positive, especially since it is your own note triggering the block.

  I’d look for an allowlist feature in case you can add the Simplenote domain to it. I also suggest reporting this to Malwarebytes so they can look into this further and possibly provide you with a workaround.

• 

  htreisman · Member · January 15, 2025 at 10:08 pm

  • Copy link

  thank you, I will take your suggestions.

  however, I feel that this is something you should get your heads around, and it does imply that there is something you’re doing on this site that is triggering the false positive, and you skilled try to find out what it is and fix it on your end.

• 

  htreisman · Member · January 16, 2025 at 6:47 am

  • Copy link

  … * you should …

• 

  staff-cara · Staff · January 21, 2025 at 8:18 am

  • Copy link

  @htreisman From what you’ve shared, it is not really the Simplenote web app that is triggering the alert. Rather, it is the link itself. If you attempt to copy and paste the link on another window, for example, or open it from another app, Malwarebytes is likely to react in the same way. Can you please confirm if that happens?

• 

  htreisman · Member · January 27, 2025 at 6:23 am

  • Copy link

  Yes, that is exactly correct. This is NOT the app, this is the web site that hosts published apps. I opened it in both Chrome and Edge with the same behaviour. It works fine from my phone.

• 

  htreisman · Member · January 28, 2025 at 12:41 am

  • Copy link

  Correction:

  Yes, that is exactly correct. This is NOT the app, this is the web site that hosts published notes. I opened it in both Chrome and Edge with the same behaviour. It works fine from my phone.

• 

  staff-joey8 · Staff · January 31, 2025 at 12:17 pm

  • Copy link

  Thanks for the confirmation, @htreisman

  We don’t have any control as to why malwarebytes is doing this, so it would be best to reach out to them to find out why. It is common for such services to falsely flag legitimate websites.

  If they suggest anything which needs action from our side, please let us know!