[clamav-users] Using clamav to test for bad links in incoming emails

[Arnaud Jacques]

Hello,

javascript.ndb and spam_marketing.ndb could help too :
https://www.securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml

Le 09/02/2019 à 00:47, Eric Tykwinski a écrit :
> Check out SaneSecurity: https://sanesecurity.com/usage/signatures/
> Specifically: phish, winnow_phish_complete_url
> I’m sure there’s others as well.
>
> Sincerely,
>
> Eric Tykwinski
> TrueNet, Inc.
> P: 610-429-8300
>
>> On Feb 8, 2019, at 6:07 PM, Gene Heskett <gheskett at shentel.net 
>> <mailto:gheskett at shentel.net>> wrote:
>>
>> Hello all;
>>
>> Has anyone rigged clamd to check what looks like questionable links
>> contained in incoming emails? It seems over the last 2 weeks my spam has
>> tripled, and I suspect the real payload is in the urls in the message.
>>
>> Or is this so time consuming and bandwidth wasting its not worth it?
>>
>>
>> Cheers, Gene Heskett
>> -- 
>> "There are four boxes to be used in defense of liberty:
>> soap, ballot, jury, and ammo. Please use in that order."
>> -Ed Howdershelt (Author)
>> Genes Web page <http://geneslinuxbox.net:6309/gene>
>>
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net <mailto:clamav-users at lists.clamav.net>
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>
>
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml

-- 
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : aj at securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190209/e3af037c/attachment.htm>