Quite a bit has been said under "Better phish detection"
Just put up an autocreated little rule file based the few dozen phises in my corpus.
http://sourceforge.net/projects/sare/ If enough ppl contribute with samples, it could be created regularly.Anybody interested in sharing not defanged/altered samples, please contact me offlist.
We'll need several thousand samples to make it half way effective.If you have more than 500 unique samples to contribute, please contact me off-list.
Axb
