Hi there, This is a more or less random data point.
On Mon, 14 Mar 2022, Micah Snyder (micasnyd) via clamav-users wrote:
Sorry that this response come so late that is nearly a necro-thread. ...
Er, ditto.
... If anyone has any other ideas about it, I'd love to hear them. ...
One thing has become much more obvious lately here and I felt the need to get it written down somewhere. We're seeing a lot more spam than ever we used to which is written in CJKV (Chinese, Japanese, Korean, Vietnamese) using UTF-8 encoding. It's mostly phishing of some sort. We use UTF-8 text strings in Yara rules to catch a lot of this spam for our automatic abuse reporting system. Obviously to make things human friendly it helps a lot if the terminal emulators, editors and other tools can render the text as appropriate, but my point is that, however you manipulate Yara rules for ClamAV, as things are they work fine for this purpose and I'd really hate to lose that capability. -- 73, Ged. _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat
