Hi, I normally see maybe 6 to 10 phishing e-mails per day for the volume of mail that I handle (~15,000 msg/day). Yesterday was an explosion in my terms.
HTML.PHISHING.BANK.GEN088.SANESECURITY.0603080..............52 HTML.PHISHING.BANK.GEN615.SANESECURITY.06051202.F............6 HTML.PHISHING.BANK.GEN220.SANESECURITY.0603240...............4 HTML.PHISHING.CARD.SANESECURITY.0602210......................4 HTML.PHISHING.BANK.GEN015.SANESECURITY.0602180...............1 HTML.PHISHING.BANK.GEN055.SANESECURITY.0603050...............1 I catch these and treat them as a virus using CLAM AV and the SANE Security database. Goran Jovanovic Omega Network Solutions Tel: 416 322-0333 -----Original Message----- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Thursday, May 18, 2006 10:33 AM To: Message Sniffer Community Subject: [sniffer]Re[2]: [sniffer]Ebay Phishing Emails getting through Hello Andrew, Wednesday, May 17, 2006, 5:35:36 PM, you wrote: >> Certainly, submitting samples to spam@ (or preferably your >> local spam submission point polled by our bots) will put >> these messages in front of us if we have not already created >> rules for them. > I've just manually submitted the ~35 messages that my filters triggered > on for phishing that didn't trigger Message Sniffer today but ended up > in my HOLD folder anyway due to their total spamminess. > Most of them are against eBay and came from Germany. If your overall false positive rate is low enough then it would be great if you could automate that process to create a synthetic spamtrap. Somehow, take the most spammy of the messages that get past SNF and send them to a special account on your system from which our robots could pull the messages.... Since we code rules 24x7x365 we would be able to respond to these quickly and (from your perspective) automatically. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]> ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>