[sanesecurity] Re: Casino spams and Sanesecurity.Malware
- From: Steve Basford <steveb_clamav@xxxxxxxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Mon, 26 Jan 2009 22:33:23 +0000
wolfgang wrote:
Since the mails propagating the site are spam, I think it's fine to
detect them, but the classification "Malware" is misleading IMHO.
Steve, maybe your idea of a casino category would be best?
Ok, so, currently these are labelled as:
Sanesecurity.Malware.9817 (in phish.ndb database)
How about,
Sanesecurity.Casino.9817 (in phish.ndb database)
I don't really want to move them out of the phish.ndb database, firstly
because Casino's by there very nature ask for credit
card details (so could be phishing) and secondly... I'd have to rename
all the signature line numbers.
I'll put it on the to-do list :)
Cheers and thanks for all the feedback,
Steve
Sanesecurity
Other related posts:
