[Slightly OT] Phishing detection

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Martin Hepworth wrote:

> Pete
>
> it just treats is as a virus so not sure you can switch this off from a
> ClamAV point of view. BUT MS might be able to do something with the
> Silent Viruses option, but there are so many of them (Phishing.Bank is
> up to at least 107).

A simple
Silent Viruses = phishing
will do the job.

>
> From what I'm seeing it's picking up a fair few every day(around 30% of
> my virus's are these phishing things).
>
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Peter Russell wrote:
>
>> How do you turn off phishing detection in clamav?
>>
>> Does anyone know how accurate it is?
>>
>> Pete
>>
>> Julian Field wrote:
>>
>>> Alisdair Davey wrote:
>>>
>>>>>> A quick question for people. The IT depeartment of the
>>>>>> univesrity I used to
>>>>>> work out just sent out a note about its virus scanner Macafee
>>>>>> detecting a
>>>>>> phishing attack. I use Clamav and F-Prot onmy mail gateways
>>>>>> and see plenty
>>>>>> of detections of phshing attacks from clamav, but none from
>>>>>> fprot. If you
>>>>>> use a different virus scanner can you let me know if it
>>>>>> detects phishing
>>>>>> attacks. Feel free to email me personally and I'll summarize
>>>>>> to the list.
>>>>>>
>>>>>>
>>>>> I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
>>>>> phishing, with clamav being the one catching the most. Bitdefender
>>>>> does not do phishing, so... fprot isn't alone in this... and not
>>>>> entirely wrong either. Phishing is after all not really a virus type
>>>>> of thing. But having the click-happy users I do, I do appreciate that
>>>>> both clam and mcafee do detect/remove most:-).
>>>>>
>>>>> I've never seen a phish that clamav missed but mcafee caught.
>>>>>
>>>>> And if one wants to eb sure any phishing is real obvious, why not use
>>>>> MS phishing net?
>>>>>
>>>>>
>>>>
>>>> Very true - may I take it from the lack of other responses that
>>>> clamav /
>>>> mcafee are the only two virus scanners to detect phishing attempts as
>>>> viruses?
>>>>
>>> As far as I am aware, yes.
>>> Of course I only use MailScanner's phishing net :-)
>>

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!