https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6631

             Bug #: 6631
           Summary: Suggestion for rules - certain "government" phishing
                    attempts.
           Product: Spamassassin
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [email protected]
    Classification: Unclassified


1)  USA:  Internal Revenue Service.
Key phrase:  "We are unable to process your tax return"

The IRS never sends this type of email.  It is always a phish or a virus.
The IRS does request that all copies be sent to <[email protected]>.

2)  USA:  "Traffic Ticket" type spam/phish.
Key phrase:  "UNIFORM TRAFFIC TICKET"

Currently, this type of mail is impersonating New York State, but I suspect
that it will evolve and include other jurisdictions (states or countries).
Other phrase:  "SEND IT TO TOWN COURT, CHATAM HALL., PO BOX 117"


I don't know if these are being received by alot of people, but I have received
5 of the former and 1 of the latter in the past month.  If someone wants to add
rules for this, such would be nice.  Please add them for mass checking. 
Sometimes, they are seen with an attachment - a zip archive with a virus
inside, and sometimes, they are stand alone.  Obviously, when a virus is
present, one's anti-virus program should see it (unless it's extremely new).

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to