A security researcher noticed a security snafu involving a McAfee security feature designed to scan and block malicious links sent via email. McAfee’s ClickProtect rewrites all URLs in an email message to ones that use the domain “cp.mcafee.com” Instead, a suspicious URL registered under the same domain was redirected to a malicious Microsoft Word document. A Salesforce.com administrator described witnessing a similar problem several years ago. In a statement, McAfee says it has investigated Benkow’s alert and found “the ClickProtect feature operated as designed””]
Source: https://www.databreachtoday.com/researcher-mcafee-url-security-service-gave-pass-to-trojan-a-10458