On 12/22/2020 6:08 PM, Joe Acquisto-j4 wrote:
Joe, you might look at enabling the OLEVBMacro plugin and adding the KAM
Ruleset,https://mcgrail.com/template/kam.cf_channel, which has rules to
help combat these type of spam emails.
Regards,
KAM
Kevin, I hesitate to ask here, but, you refer to SA I believe? I've been
lurking there regarding the KAM discussion.
Hi Joe, yep, I am referring to a plugin and ruleset for Apache
SpamAssassin, apologies for my lack of clarity. Though we are working
on using our honeypot data to generate a clamav signature file for
malicious content. We've also been working on tooling to automate it.
I thought it was on https://github.com/The-McGrail-Foundation but
perhaps someone made it private by accident but I'll get it added under
mcgrail.com soon. Contact me off-list if you might be interested in
testing/developing!
Regards,
KAM
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml