One Hotmail spammer peddling Chinese drugs is consistently getting through.
There just isn't enough wrong with the emails to get it stopped.
One oddity is the formatting of the subject line over multiple lines:
Subject: [Possible SPAM]
On 1/13/2012 10:39 AM, Scott Fisher wrote:
One Hotmail spammer peddling Chinese drugs
is consistently getting through.
There just isn’t enough wrong with the
emails to get it stopped.
Â
One oddity
All of my samples have been send to madscientist@
From: Pete McNeil [mailto:madscient...@microneil.com]
Sent: Friday, January 13, 2012 10:10 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regex help needed
On 1/13/2012 10:39 AM, Scott Fisher wrote:
One Hotmail spammer
On 1/13/2012 11:24 AM, Scott Fisher wrote:
All of my samples have been
send to madscientist@
Sorry, I don't have them.
If they were not zipped then it is likely the message got stripped
out by existing rules.
If they were zipped perhaps they are just slow
Apparently I’m catching them on the way out with clamav .
Resending now
From: Pete McNeil [mailto:madscient...@microneil.com]
Sent: Friday, January 13, 2012 10:50 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regex help needed
On 1/13/2012 11:24 AM, Scott Fisher wrote:
On 1/13/2012 12:03 PM, Scott Fisher wrote:
Resending
now
Ok I got it and we identified a few additional vectors to throw at
this. SNF should catch more of these now, and the SortMonsters are
looking at additional vectors as our supply of samples grows. At
