Windows Defender blocked BAQ Report SSRS download as "Virus" - Specifically Trojan

Tried downloading an BAQ Report SSRS Report (Cloud, Pilot) for a newly created BAQ Report. Windows Defender blocked it saying it was a Virus.
image

I allowed it through and it had a very strange default server. I checked the .rdl file in a text editor, and that server is set in the <rd:ReportServerUrl> element:

image

Anyone seen this before? It’s not a huge concern for me, I just removed that element and got on with editing the report. Seems weird though.

Edit: Wanted to add that I did the same thing week before last and didn’t see anything like this. No flags from defender, and the Server URL element was empty.

1 Like

Defender is notorious for false positives for Wacatac.B!ml.