Re: sa-update (nightly mass-check)

2014-04-08 Thread Dave Warren
On 2014-04-08 11:17, Kevin A. McGrail wrote: On 4/8/2014 2:15 PM, Dave Warren wrote: On 2014-04-08 03:56, Kevin A. McGrail wrote: On 4/8/2014 1:16 AM, Dave Warren wrote: On 2014-04-07 19:23, Thomas Harold wrote: NOTE: New masscheck contributors are now being accepted since about 2012-08-09.

Re: sa-update (nightly mass-check)

2014-04-08 Thread Kevin A. McGrail
On 4/8/2014 2:15 PM, Dave Warren wrote: On 2014-04-08 03:56, Kevin A. McGrail wrote: On 4/8/2014 1:16 AM, Dave Warren wrote: On 2014-04-07 19:23, Thomas Harold wrote: NOTE: New masscheck contributors are now being accepted since about 2012-08-09. Is that supposed to say "now being" or "not be

Re: sa-update (nightly mass-check)

2014-04-08 Thread Dave Warren
On 2014-04-08 03:56, Kevin A. McGrail wrote: On 4/8/2014 1:16 AM, Dave Warren wrote: On 2014-04-07 19:23, Thomas Harold wrote: NOTE: New masscheck contributors are now being accepted since about 2012-08-09. Is that supposed to say "now being" or "not being"? I'm assuming "now being" since th

Re: unusual new pump-and-dump campaign ("RCHA")

2014-04-08 Thread Axb
On 04/08/2014 07:50 PM, Chip M. wrote: Starting Apr 5, about _HALF_ of our spam volume is a new pump and dump campaign for stock symbol "RCHA". As well as the high volume, there are several noteworthy characteristics: - victim account name is used as the sender/From account name - very clean

Re: sa-update

2014-04-08 Thread jdebert
On Mon, 07 Apr 2014 17:22:37 -0400 Thomas Harold wrote: > On 4/6/2014 11:25 PM, jdebert wrote: > > > > This explains why SA is not catching any spam here? After updating > > to updates 1584283 and then 1585021, all spam is being passed. > > Nothing else was done. No other changes made. > > > >

unusual new pump-and-dump campaign ("RCHA")

2014-04-08 Thread Chip M.
Starting Apr 5, about _HALF_ of our spam volume is a new pump and dump campaign for stock symbol "RCHA". As well as the high volume, there are several noteworthy characteristics: - victim account name is used as the sender/From account name - very clean HTML - very few hits on non-DNS/RBL Spa

Re: sa-update (nightly mass-check)

2014-04-08 Thread John Hardin
On Mon, 7 Apr 2014, Dave Warren wrote: On 2014-04-07 19:23, Thomas Harold wrote: > NOTE: New masscheck contributors are now being accepted since about > 2012-08-09. Is that supposed to say "now being" or "not being"? I'm assuming "now being" since there are regular mentions of a need for

Re: sa-update (nightly mass-check)

2014-04-08 Thread Kevin A. McGrail
On 4/8/2014 1:16 AM, Dave Warren wrote: On 2014-04-07 19:23, Thomas Harold wrote: NOTE: New masscheck contributors are now being accepted since about 2012-08-09. Is that supposed to say "now being" or "not being"? I'm assuming "now being" since there are regular mentions of a need for ham co