On 3/12/2012 12:49, David F. Skoll wrote:
Hi,
I've been following this thread... not sure how many of you are aware of
this project:
http://code.google.com/p/anti-phishing-email-reply/
We use the phishing address list and it does catch a few things. We
don't yet use the phishing URL list, but it looks like it might help.
Naturally, this list is reactive, but if enough people used it and
contributed to it, the results might be pretty good.
Regards,
David.
Most of the phishing spam we see seems to come from apparently-compromised accounts, so we
seldom see the same sender address for more than a few hours, or a few days, at most.
Phishing reply-to addresses and phishing URL's change less frequently.
There are several variants of phishing message text, and new variants are introduced from
time to time, but the message body seems to be the most reliable source of filter fodder.
YMMV, of course.
--
Paul Russell, Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame
