I just know others have referred to it as that.  Prior to two days ago, 
everything I saw was from a [EMAIL PROTECTED] address, but it stopped yesterday 
and reformed today as just the " wrote:" campaign.

We've seen a lot today that Sniffer did not catch, but other methods did.  Our 
definitions are updated immediately upon Sniffer notification.

Darin.


----- Original Message ----- 
From: John T (Lists) 
To: [email protected] 
Sent: Thursday, November 30, 2006 1:05 PM
Subject: RE: [Declude.JunkMail] Deborah campaign changed


FYI, from day one on Sunday, I was seeing subject lines with at least 6 
different first names before wrote: so AFAIK there is no such thing as a Debora 
spam campaign, I have called it the " wrote:" campaign which Sniffer has been 
catching since Sunday night.



John T

eServices For You



"Life is a succession of lessons which must be lived to be understood."

Ralph Waldo Emerson (1802-1882)





-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Thursday, November 30, 2006 8:41 AM
To: [email protected]
Subject: [Declude.JunkMail] Deborah campaign changed



I noticed the Debora spam campaign has changed in the past couple of days.  
Looks like it's no longer coming from addresses that start with debora.  
However, subject is still ending with " wrote:".  Body filtering may be 
desirable as well since most, if not all, of it is stock spam with filterable 
text.



Has there been any progress at Declude regarding leading and trailing spaces in 
filter text?  Last I had heard this was still something being added.


Darin.






---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to