Nebula-windows-amd64 is detected as Malware by Microsoft defender

[Syncnetworkteam]

Hi Team,

We have planned to implement Nebula in our environment. Microsoft Defender has identified and removed the Nebula latest version [Release v1.7.2] as malware. 

Please see the detection snap for more details.

Is it safe to proceed further? since, even in virus total file is defects malware.

[nbrownus]

Not sure why Windows Defender is angry about this release yet. We have submitted to Microsoft and are waiting to hear back.

The easiest way around this that I have found so far is to build v1.7.2 manually.

[Syncnetworkteam]

Hi nbrownus,

I appreciate your prompt reply. Let me know as soon as you hear back from Microsoft. We cannot disregard the Windows Defender warning in our environment in accordance with our policies.

Once again thank you for your support.

[rawdigits]

Hi there. I actually stumbled upon a solution that may work for folks, and we are considering distributing it this way until the malware misidentification issue is resolved.

You can use a binary packer like upx to compress executables to be smaller on disk. I just tried it on nebula.exe and it passed windows defender without tripping anything.

[rawdigits]

nebula.exe.zip
You are welcome to try this version for yourself in the meantime.

[johnmaguire]

@Syncnetworkteam No updates, we're continuing to work on it. While this is a priority for us, it's also a system out of our control.

[johnmaguire]

We are aware of the issue and continuing to work on a resolution. We will provide an update as soon as we have one.

[johnmaguire]

Hi @Syncnetworkteam - this issue should now be resolved. Please see #902 (comment) for complete details. Thanks.