On Thu, 2009-07-30 at 20:02 +0200, Jack Raats wrote: > Today I received a new kind of phissing mail. > > Spamassassin (freebsd), clamav (freebsd) and avg (windows) didn't recognised > it. > > The email had an attached word file in which the phissing was written.
Yes, its a variation of one that as tried a couple of months ago. Last time they used RTF format. Now bona-fide word docs. > > Yes today I won one million pound in the UK, but I have to fetch the money in > south-africa :-) it shows up in razor-agent. Not hard to defeat that, so we will need a longer-term strategy.. There was some discussion on the SpamAssassin list a couple of weeks ago of a plugin to grab word files and strip out the text using wvText or some-such. then tossing that all into SpamAssassin for regularization and rules. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
