[Slightly OT] Phishing detection

Julian Field MailScanner at ecs.soton.ac.uk
Mon Mar 7 17:51:04 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Alisdair Davey wrote:

>>>A quick question for people. The IT depeartment of the
>>>univesrity I used to
>>>work out just sent out a note about its virus scanner Macafee
>>>detecting a
>>>phishing attack. I use Clamav and F-Prot onmy mail gateways
>>>and see plenty
>>>of detections of phshing attacks from clamav, but none from
>>>fprot. If you
>>>use a different virus scanner can you let me know if it
>>>detects phishing
>>>attacks. Feel free to email me personally and I'll summarize
>>>to the list.
>>>
>>>
>>I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
>>phishing, with clamav being the one catching the most. Bitdefender
>>does not do phishing, so... fprot isn't alone in this... and not
>>entirely wrong either. Phishing is after all not really a virus type
>>of thing. But having the click-happy users I do, I do appreciate that
>>both clam and mcafee do detect/remove most:-).
>>
>>I've never seen a phish that clamav missed but mcafee caught.
>>
>>And if one wants to eb sure any phishing is real obvious, why not use
>>MS phishing net?
>>
>>
>
>Very true - may I take it from the lack of other responses that clamav /
>mcafee are the only two virus scanners to detect phishing attempts as viruses?
>
As far as I am aware, yes.
Of course I only use MailScanner's phishing net :-)

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list