These are actually viruses, They have an attachment that they instruct the user to option which installs any number of rootkits/backdoors/password stealers.
So far I have identified two domains that most mail claims as the from address. Both publish SPF records but define ~all so I have added them to strictSPFRe. We already have the SaneSecurity and Securite signatures installed however I thought it best to check. Turns out the old script we are using is failing to download the SS definitions so I have updated the script. Fingers crossed! -----Original Message----- From: Doug Lytle [mailto:supp...@drdos.info] Sent: 27 September 2013 12:57 To: ASSP development mailing list Subject: Re: [Assp-test] Virus scanners >> These are your typical tax refund emails but also seem to be coupled >> with a lot of fake Virgin Media bills and "rewards updates" I wouldn't consider those to be viruses. Install the SaneSecurity signatures and I believe you'll be pleasantly surprise. Doug ---------------------------------------------------------------------------- -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
