Network Traffic Categorized as Malware

[Anthony_Gomez]

We are seeing an uptick in normal network traffic being classified as malware. Example sites include nasdaq, vice, and times. One thing they have in common is that the dest IPs points back to leaseweb. Is anyone else seeing this or know of a change that could be causing this?

[kiwi]

Hi @Anthony_Gomez ,

Maybe a recent content update triggered something.  I'd suggest grabbing some of the PCAPs from the threat log and file them with support for analysis. 

Kind regards,

-Kiwi.