Re: Using UTF-8 characters to avoid spam filter rules.

2018-06-29 Thread RW
On Fri, 29 Jun 2018 10:20:45 -0400 Alex wrote: > On Thu, Jun 28, 2018 at 3:59 PM, Zinski, Steve > wrote: > > These sextortion scammers are clever. So, instead of filtering on > > the word “bitcoin”, I now filter on a bitcoin regex (see below) > > > > > > > > body __BITCOIN /\b[13]

Re: Using UTF-8 characters to avoid spam filter rules.

2018-06-29 Thread John Hardin
On Fri, 29 Jun 2018, Alex wrote: On Thu, Jun 28, 2018 at 3:59 PM, Zinski, Steve wrote: These sextortion scammers are clever. So, instead of filtering on the word “bitcoin”, I now filter on a bitcoin regex (see below) and some other words such as “pixel”, “virus”, etc. which are always a part

Re: Google redirects

2018-06-29 Thread Kevin A. McGrail
On 6/29/2018 11:33 AM, Alex wrote: > Hi, > > On Fri, Jun 29, 2018 at 11:03 AM, Kevin A. McGrail > wrote: >> Hard to say without context but I'm seeing spams using >> www.google-munge-.com/url?q= trying to obfuscate >> things. Is that what you mean? > Here's an example from a few minutes ago. Yo

Re: Google redirects

2018-06-29 Thread Alex
Hi, On Fri, Jun 29, 2018 at 11:03 AM, Kevin A. McGrail wrote: > Hard to say without context but I'm seeing spams using > www.google-munge-.com/url?q= trying to obfuscate > things. Is that what you mean? Here's an example from a few minutes ago. Not able to show full message.https://www.google.

Re: Google redirects

2018-06-29 Thread Kevin A. McGrail
Hard to say without context but I'm seeing spams using www.google-munge-.com/url?q= trying to obfuscate things. Is that what you mean? -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On

Google redirects

2018-06-29 Thread Alex
Hi all, Are we still considering google redirects more dangerous than useful? http://a29842.actonservice.com/acton/ct/29842/s-00cd-1708/Bct/q-0050/l-0035:1388/ct0_1/1?sid=TV2%3Aok73 T3SOd&elqTrackId=731BA3C25E8C727EDA32C1350B460CC5&elq=1dc278553a2445bb88bcc9b73bf4ef85&elqaid=57&elqat=1&elqCampai

Re: Using UTF-8 characters to avoid spam filter rules.

2018-06-29 Thread Alex
On Thu, Jun 28, 2018 at 3:59 PM, Zinski, Steve wrote: > I see that a lot in sextortion emails. So far, I’ve seen the word > “bitcoin” encoded (obfuscated) the following ways: > > > > bitc%D0%BEin > > bit%D1%81oin > > bit%D1%81%D0%BEin > > > > And the word “wallet” as: > > > > w%D0%B0ll%D0%B5t > >

Semi-OT: Protonmail and its DDOS

2018-06-29 Thread Pedro David Marco
https://www.bleepingcomputer.com/news/security/protonmail-ddos-attacks-are-a-case-study-of-what-happens-when-you-mock-attackers/ >From a technical perspective, nowadays there is not much you can do unless you >have tons of money... :-(  Pedro