Would that be the "Laugh" in the subject line pharmaceutical spam campaign?
That was mentioned by Dave Doherty on the Declude.JunkMail mailing list, and when I checked my logs I found many hundreds with clear variations on the keywords in the text, e.g. there is a joke about lawyers and they are using a list of synonyms for lawyer (and many other words/phrases) so that each mailing is permuted. MesageSniffer was catching at least some of these yesterday but I don't know if the permutations are being caught. Andrew 8) > -----Original Message----- > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Monday, August 21, 2006 8:38 AM > To: Message Sniffer Community > Subject: [sniffer] Re: Lots of drug spam getting through > > Hello Nick, > > There have been a couple new very aggressive spikes today... > most likely these are part of that. I will dig-in with the > rule-techs and see what is what. > > Thanks, > > _M > > Monday, August 21, 2006, 11:27:37 AM, you wrote: > > > We're seeing similar - I keep submitting them to > [EMAIL PROTECTED], > > but the same type of spam keeps getting through... > > > > Nick Marshall > > > > Legally privileged/confidential information may be > contained in this > > message. If you are not the addressee(s) legally indicated in this > > message (or responsible for delivery of the message to such > person), > > you may not copy or deliver this message to anyone. In > such case, you > > should destroy this message, and notify us immediately. If you or > > your employer does not consent to Internet e-mail messages of this > > kind, please advise us immediately. Opinions, conclusions > and other > > information expressed in this message are not given or > endorsed by my > > firm or employer unless otherwise indicated by an > authorised representative independent of this message. > > Please note that neither my employer nor I accept any > responsibility > > for viruses and it is your responsibility to scan attachments (if > > any). This email and any files transmitted are confidential and > > intended solely for the use of the individual or entity to > which they > > are addressed. If you have received this email in error, > please notify me by returning the email. > > > > > > > -----Original Message----- > > From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On > > Behalf Of Chuck Schick > > Sent: 21 August 2006 15:33 > > To: Message Sniffer Community > > Subject: [sniffer] Lots of drug spam getting through > > > We are seeing tons of spam coming through with the subject > Re: new ... > > and advertising drugs. Any luck on stopping this? > > > Chuck Schick > > Warp 8, Inc. > > (303)-421-5140 > > www.warp8.com > > > > > ############################################################# > > This message is sent to you because you are subscribed to > > the mailing list <[email protected]>. > > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To > switch to > > the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch > > to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send > > administrative queries to <[EMAIL PROTECTED]> > > > > > > _____________________________________ > > Giacom mail management by MessageStar > > > > > ---------------------------------------------------------- > > [This e-mail was scanned for viruses by Giacom Anti-Virus] > > > > > > ############################################################# > > This message is sent to you because you are subscribed to > > the mailing list <[email protected]>. > > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To > switch to > > the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch > > to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send > > administrative queries to <[EMAIL PROTECTED]> > > > > -- > Pete McNeil > Chief Scientist, > Arm Research Labs, LLC. > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[email protected]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
