[clamav-users] False positives phishing sites

[Al Varnell]

On Wed, Sep 24, 2014 at 12:41 AM, Thorvald Hallvardsson wrote:
> 
> at the moment I'm reviewing
> customers emails because the impact we are facing with the false positive
> is so massive that we would need to have a team of 4-5 people full time
> working only on false positives. It's not the matter of one or 2 messages
> but hundreds every day. Most of them are coming from the retailers - very
> well known - so I'm really surprised they have been triggered.

That’s very strange. Unless something has changed drastically, Heuristics analysis only applies to financial institutions, so I’m not sure why retailers would suddenly be using these redirected url’s in their mailings. I’m usually the first to know when world-wide Apple users suddenly get these and haven’t heard a thing about it, yet.


-Al-
-- 
Al Varnell
Mountain View, CA