Clam AntiVirus is a GPL anti-virus toolkit for UNIX and was coded to detect email viruses.

ClamAV's scanning engine is quite flexible and so has also been used to scan for phishing signatures. The Official phishing signatures in ClamAV are great but I've seen a number of phishing attempts get past the Official ClamAV signatures, so I thought I'd try to produce my own signatures to stop these phishing attempts (phish.ndb.gz).

I've also produced a scam database (scam.ndb.gz) which will help detect some types of stock, lottery, 419 and some image spams that are around at the moment. Please read the Usage section before downloading.

SaneSecurity signatures are a culmination of hard work and commitment to providing
Third-Party signatures to the web community that are of professional quality.

If you feel that you would like to give a donation for your use of these signatures,
or just because you want to support us, please consider making a donation.

Cheers,

Steve