Phishing & BotNets
Distribution list full of fake emails May 25 2007 12:56PM
Lafosse, Ricardo (rlafosse sfwmd gov) (1 replies)
Re: Distribution list full of fake emails May 25 2007 11:17PM
Jose Nazario (jose monkey org) (1 replies)
On Fri, 25 May 2007, Lafosse, Ricardo wrote:

> I am trying to filter "spam"/fake emails populating my distribution
> lists, I currently do not have a spam filter. I was wondering if a spam
> filter would do justice or do I have to continue manually filtering fake
> emails. The emails look very legit however some of the wordage is off
> and that is how I recognize them. Any help would be greatly appreciated.

clam av does a decent job of spotting phish emails (as well as virus
attchments). sanesecurity also has clamav sigs based on the phishtank
phishing emails:

http://sanesecurity.co.uk/clamav/usage.htm

hope this helps you selectively deal with phishing emails on your lists.

________
jose nazario, ph.d. jose (at) monkey (dot) org [email concealed]
http://monkey.org/~jose/ http://monkey.org/~jose/secnews.html
http://www.wormblog.com/

[ reply ]
Re: Distribution list full of fake emails May 26 2007 04:21AM
Ali, Saqib (docbook xml gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus