Where Does ClamAV Get Its Virus Signatures?

ClamAV, an antivirus software, obtains its virus signatures through various sources, including its parent company Cisco and its Talos Group. The signatures are stored on ClamAV’s server and can be manually downloaded.

ClamAV belongs to Cisco and its Talos Group. Cisco acquired Sourcefire, the makers of Snort and ClamAV in late 2013.

Sourcefire also belongs to Cisco.

Many big contributors to ClamAV’s virus database are antivirus vendors and security companies.

Each update of ClamAV’s virus definitions contains information about the sender, some mention Virus Total, VRT Sandbox, and others. Generally, antivirus vendors, security researchers, and contributors collaborate and share samples.

There is also a mailing list for community contributed signatures, allowing anyone to contribute to ClamAV’s virus detection capabilities.

Overall, ClamAV’s virus signatures are sourced from a variety of reputable organizations and individuals, ensuring the software’s effectiveness in detecting and protecting against malware.