Security

Hi all,

About 10 days ago our Office 365 users starting getting the red Google harmful programs page  when accessing

OneDrive, Excel/Word on our Sharepoint site collection url   ######-my.sharepoint.com

The “-my” in the url is the main source of our issue as we are not able to verify the site in the Google Search Console and thus request a site review.

We have identified the offending file which a user somehow uploaded to OneDrive and shared out as a “anyone can read or edit” link.

You can see this link at https://urlhaus.abuse.ch/url/66138/ . It was a zip file containing a vbs script. This has since been removed.

This issue only effects Google Chrome and Firefox (Firefox using the same database as Google)

The following are the methods for verification on Google Search Console:

Html file

Html Meta tag

Google Analytics

Google Tag Manager

Domain name provider

We have not been able to successfully implement any of these.

If it was our main site without the "-my" in it we might have more luck as we can add source code.

I discovered the Google Safe Browsing url whitelist policy but this only applies to Active Directory users and unfortunately only a relatively small percentage of our users are joined to the domain.

We have been on the phone with Microsoft Support and Google support via old Gsuite account to no avail.

I have also emailed stopbadware.org which are partnered with google but they don't seem to be active (we are not

in their database).

Thanks for any help!