Sophos suddenly detecting Trusteer Rapport?

Yes, I've had 4 different clients using the service and it's detecting it.  Looks like the service is trying to do an update that Sophos believes matches what Ransomware would do.  Been a little hesitant to throw it as a global exception but I'm thinking if others are getting it, it's probably safe.  Bad thing is that it has to be on there for those who scan checks / do deposits on their machines.  So stuck with dual scanners.

Hello Zeban,

Thank you for contacting the Sophos Community.

If you think this is a False Positive, you can submit a sample to https://support.sophos.com/support/s/filesubmission?language=en_US, so labs can work in the Recategorization. 

Regards,