Are cryptominers using your device without your knowledge? from: static-hello.bitdefender.com

received an email today from "static-hello.bitdefender.com," which appeared to change the application date to today's date and prompted "grant full disk access." System preferences already had the boxes checked but were grayed out because access needs to be unlocked first.

This all seems very strange to me, but if it is legit I can probably fudge my way through it.