Phishing & BotNets
Distribution list full of fake emails May 25 2007 12:56PM
Lafosse, Ricardo (rlafosse sfwmd gov) (1 replies)
Re: Distribution list full of fake emails May 25 2007 11:17PM
Jose Nazario (jose monkey org) (1 replies)
Re: Distribution list full of fake emails May 26 2007 04:21AM
Ali, Saqib (docbook xml gmail com)
I think the only way to tackle spam/phishing attempts on mailing list
is to turn on strict moderation.

Being a list moderator myself, I see tremendous amount of spam on
http://www.full-disk-encryption.net (cryptography) list. so i have
turned on the strict moderation where only list subscribers can post.

Unisog (University Security Operations Group) has done the same.

On 5/25/07, Jose Nazario <jose (at) monkey (dot) org [email concealed]> wrote:
> On Fri, 25 May 2007, Lafosse, Ricardo wrote:
>
> > I am trying to filter "spam"/fake emails populating my distribution
> > lists, I currently do not have a spam filter. I was wondering if a spam
> > filter would do justice or do I have to continue manually filtering fake
> > emails. The emails look very legit however some of the wordage is off
> > and that is how I recognize them. Any help would be greatly appreciated.
>
> clam av does a decent job of spotting phish emails (as well as virus
> attchments). sanesecurity also has clamav sigs based on the phishtank
> phishing emails:
>
> http://sanesecurity.co.uk/clamav/usage.htm
>
> hope this helps you selectively deal with phishing emails on your lists.
>
> ________
> jose nazario, ph.d. jose (at) monkey (dot) org [email concealed]
> http://monkey.org/~jose/ http://monkey.org/~jose/secnews.html
> http://www.wormblog.com/
>

--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus