Please, help me PUA On-access detection in Sophos Linux

QC said:

Hello Henrique RJ,

PhishTank deals with sites, On-Access scans files. As far as I can see the example site is blocked by Web Protection (which is not available on Linux) - the On-Access scanner and its detection items don't come into play here.

Christian

 

Disagree

Eureka !!!

Sophos in Linux finaly detection a phishing page.

Look

The object detected in VirusTotal: " Dropbox - sign in.html "

www.virustotal.com/

Detection for link:

www.virustotal.com/

As you can see from the popup - that is a detection on a file (in the mozilla cache).

Nothing to do with the network connection or the URL being fetched.

DouglasLeeder said:

As you can see from the popup - that is a detection on a file (in the mozilla cache).

Nothing to do with the network connection or the URL being fetched.

 

Thats right

For detect URL I have the Firefox and uBlock Origin protection.

From the VirusTotal link you can see the detection for signature ( phishing ) in file " Dropbox sign in.html ".

Thanks

Hi Henrique RJ,

The reported URL in Virustotal is detected by the Network or MTD of Sophos AV that is not available in the Linux.

The detection that you see is for the file that is locally stored in the machine via the browser which will be picked by the SAV.

Gowtham Mani said:

Hi Henrique RJ,

The reported URL in Virustotal is detected by the Network or MTD of Sophos AV that is not available in the Linux.

The detection that you see is for the file that is locally stored in the machine via the browser which will be picked by the SAV.

 

Yes now I know

Thanks