[Slightly OT] Phishing detection

Julian Field MailScanner at ecs.soton.ac.uk
Tue Mar 8 09:24:35 GMT 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Martin Hepworth wrote:

> Pete
> it just treats is as a virus so not sure you can switch this off from a
> ClamAV point of view. BUT MS might be able to do something with the
> Silent Viruses option, but there are so many of them (Phishing.Bank is
> up to at least 107).

A simple
Silent Viruses = phishing
will do the job.

> From what I'm seeing it's picking up a fair few every day(around 30% of
> my virus's are these phishing things).
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
> Peter Russell wrote:
>> How do you turn off phishing detection in clamav?
>> Does anyone know how accurate it is?
>> Pete
>> Julian Field wrote:
>>> Alisdair Davey wrote:
>>>>>> A quick question for people. The IT depeartment of the
>>>>>> univesrity I used to
>>>>>> work out just sent out a note about its virus scanner Macafee
>>>>>> detecting a
>>>>>> phishing attack. I use Clamav and F-Prot onmy mail gateways
>>>>>> and see plenty
>>>>>> of detections of phshing attacks from clamav, but none from
>>>>>> fprot. If you
>>>>>> use a different virus scanner can you let me know if it
>>>>>> detects phishing
>>>>>> attacks. Feel free to email me personally and I'll summarize
>>>>>> to the list.
>>>>> I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
>>>>> phishing, with clamav being the one catching the most. Bitdefender
>>>>> does not do phishing, so... fprot isn't alone in this... and not
>>>>> entirely wrong either. Phishing is after all not really a virus type
>>>>> of thing. But having the click-happy users I do, I do appreciate that
>>>>> both clam and mcafee do detect/remove most:-).
>>>>> I've never seen a phish that clamav missed but mcafee caught.
>>>>> And if one wants to eb sure any phishing is real obvious, why not use
>>>>> MS phishing net?
>>>> Very true - may I take it from the lack of other responses that
>>>> clamav /
>>>> mcafee are the only two virus scanners to detect phishing attempts as
>>>> viruses?
>>> As far as I am aware, yes.
>>> Of course I only use MailScanner's phishing net :-)

Julian Field
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list