Hi All, I'm pleased to announce two new signatures databases:
New Database 1: Database name: spearl.ndb Description: phishing_links is a list of generic forms used for e-mail account phishing Provider: APER Risk of FP's: low Website: http://code DOT google DOT com/p/anti-phishing-email-reply/ New Database 2: Database name: scamnailer.ndb Note: this database may use more cpu resources, due to extensive use of conditional signatures Description: This uses far more than just the well-known list of phishing email addresses published on SourceForge. It also uses a very large list of addresses, which have been discovered and manually checked by a large and very well known corporation on the web, which you will definitely have heard of Provider: Julian Field/Tony Finch Risk of FP's: medium Website: www DOT scamnailer DOT info New scripts will no doubt be available soon to take advantage of these two new databases (unless you edit them yourself) In other news: a) Tweaks have been made to spear.ndb file to improve the detection rates. b) Lots of generic signatures to help block spear phishing have been added to phish.ndb (generally Sanesecurity.Phishing.Fake's) Cheers, Steve Sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
