On 09/05/11 16:18, Matus UHLAR - fantomas wrote: > Do you have an idea how should I detect if a mail is a phish, or any > other content (which?) that should our abuse@ teram know about?
Hi Matus, You are supposed to recognize phishing from the virus names, for example using a regex like: ^(Email|HTML)\.Phishing Mind you, there are currently 2 spurious entries which are likely not intended to be there. I'm gonna fix them this week: acab@barney:~$ sigtool -l | grep -i phish | egrep -v '^(HTML|Email)[.]Phishing' Catphish.698.A Catphish.698.B E-Mail.Phishing.SMT PDF.Phishing HtH, Albe _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
