Avast Iconmoon Malware on Marketo email

[Anonymous]

Hello Marketo Team and users,

One of our customers have just notified us that their Avast infection notification has triggered citing a possible infection that is coming from the font of one of our Marketo emails.

It looks like a Malware trigger on https://www.w3cplus.com/demo/css3/CSS3DForm/fonts/icomoon.svg if that helps.  I've attached the notification for your reference.

Is anyone else experiencing this?

Thanks for your help.

Vitt

[SanfordWhiteman]

The threat is from www.w3cplus.com, not the Icomoon source. Avast Web Shield is a URL blacklist.

Whether the w3cplus.com domain is a false positive or not, I can't say, but I wouldn't be surprised if Avast knows something about that domain that you don't... better to host your Icomoon from their CDN or your own servers.