Security teams should not block the GlobalSCAPE binaries but rather restrict their execution path and monitor their behavior for child process creation and anomalous network connections.
Add the legitimate Globalscape folder and processes to your antivirus/EDR allow list. Submit the file to your security vendor for reclassification. globalscape malicious
Less sophisticated malware families may rename their payloads to mimic GlobalSCAPE processes to hide within process lists (e.g., naming a persistent backdoor globalscape.exe or eftserver.exe ). Security teams should not block the GlobalSCAPE binaries
Software can sometimes be misused or have vulnerabilities. Many organizations, including Globalscape, actively work to address these issues and protect their users. If you're concerned about Globalscape or its software, stay informed about the latest security updates and consider reaching out to their support team for guidance. If you're concerned about Globalscape or its software,
Fortra (Globalscape's parent company) regularly releases patches for these issues. Organizations should monitor the vendor's patch notes and apply updates immediately within their maintenance windows to close these entry points. 2. Guarding Against Malicious File Transfers