[Slightly OT] Phishing detection

[Steen, Glenn]

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Alisdair Davey
> Sent: den 4 mars 2005 19:30
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: [Slightly OT] Phishing detection
> 
> 
> A quick question for people. The IT depeartment of the 
> univesrity I used to
> work out just sent out a note about its virus scanner Macafee 
> detecting a
> phishing attack. I use Clamav and F-Prot onmy mail gateways 
> and see plenty
> of detections of phshing attacks from clamav, but none from 
> fprot. If you
> use a different virus scanner can you let me know if it 
> detects phishing
> attacks. Feel free to email me personally and I'll summarize 
> to the list.
I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
phishing, with clamav being the one catching the most. Bitdefender
does not do phishing, so... fprot isn't alone in this... and not
entirely wrong either. Phishing is after all not really a virus type
of thing. But having the click-happy users I do, I do appreciate that
both clam and mcafee do detect/remove most:-).

I've never seen a phish that clamav missed but mcafee caught.

And if one wants to eb sure any phishing is real obvious, why not use
MS phishing net?

-- Glenn

> Thanks
> Alisdair
> 
> --
> Dr Alisdair Davey                                 ard at pergamentum.com
> Pergamentum Solutions                             Tel: 1-303-981-9838
> 2066 Dailey Lane
> Superior, CO 80027
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!