Anti-spear-phishing sa-update channel

[Julian Field]

On 30/1/09 16:32, Scott Silva wrote:
> on 1-30-2009 12:52 AM shuttlebox spake the following:
>    
>> On Sun, Jan 11, 2009 at 10:41 PM, Matt<spamlists at coders.co.uk>  wrote:
>>      
>>> All
>>>
>>> If anyone is interested I have published an sa-update channel which
>>> generates the same rules as Jules' script.
>>>
>>> The channel is
>>>
>>> spear.bastionmail.com
>>>        
>> I started using it at a client site a week ago and have received four
>> (4) hits so far. :-)
>>
>> What kind of results do others see?
>>
>>      
> I haven't seen any hits and I added this when it came out weeks ago. I am
> probably killing all the junk it might have caught with blacklists at the MTA.
>    
The biggest recipients of spear-phishing attacks appear to be academic 
institutions. So if you aren't one of those, it's quite possible you 
won't see any hits. I see a lot here.

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.