Joe Young wrote: > > Can someone expand on the ClamAV detecting phishing attempts. Or > direct me some where? > > Thank you,
It just detects the message itself as a virus. Here's a sample report generated when MailScanner fed a phishing email to our virus scanners: The following e-mails were found to have: Virus Detected Sender: [EMAIL PROTECTED] IP Address: 66.199.161.40 Recipient: [EMAIL PROTECTED] Subject: Your Account Will Be Suspended ; Checking MessageID: j2ELE82X031642 Report: ClamAV: msg-18232-49.html contains HTML.Phishing.Pay-6