anyone collecting French 419 scams?

2009-10-19 Thread McDonald, Dan
Lately, a few 419 scams have been slipping through to me, written in French - I get two or three a week. It's sort of amusing to me, but wondered if anyone is collecting them to write rules. X-Spam-Status: No, score=4 tagged_above=-999 required=4.5 tests=[BOTNET_SOHO=-0.1, L_P0F_UNKN=0.8,

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Hardin
On Mon, 19 Oct 2009, McDonald, Dan wrote: Lately, a few 419 scams have been slipping through to me, written in French - I get two or three a week. It's sort of amusing to me, but wondered if anyone is collecting them to write rules. X-Spam-Status: No, score=4 tagged_above=-999 required=4.5

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Hardin
On Mon, 19 Oct 2009, McDonald, Dan wrote: http://pastebin.com/m693d3d17 One thing that leaps right out at me is the encoded characters (e.g. #3648;) in a text/plain body part. Does tis-620 provide for that? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Wilcock
I'd be happy to see them. I'm working on updating the Advance Fee 419 ruleset and your samples would be welcome. Feel free to gzip up a mbox and send it to me. I have a ruleset at http://www.tradoc.fr/spamassassin/fraude_fr.cf that, while it hasn't been actively updated for a while, still hits