Re: Compromised squareup/amazonses account phish

2018-06-13 Thread Bill Cole
On 13 Jun 2018, at 15:20 (-0400), Alex wrote: Hi, This phish appears to have been routed through Amazon but DKIM signed by squareup. Is this a compromised squareup.com account? For a loose definition of "compromised," yes. Possession of a Square account is not evidence of ethical integrity.

Re: MISSING_SUBJECT

2018-06-13 Thread John Hardin
mails hitting MISSING_SUBJECT is spam - how much of mails hitting MISSING_SUBJECT is ham. if the percentage is very different in there two cases, the rule gets high positive (or negative) score. S/O = .826 http://ruleqa.spamassassin.org/20180613-r1833448-n/MISSING_SUBJECT/detail -- John Hardin K

Re: MISSING_SUBJECT

2018-06-13 Thread John Hardin
On Tue, 12 Jun 2018, micah anderson wrote: I had a message marked with: 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: It did not have a subject, but it did have content (although only encrypted) It may not be considering an encrypted message part to be a text

Compromised squareup/amazonses account phish

2018-06-13 Thread Alex
Hi, This phish appears to have been routed through Amazon but DKIM signed by squareup. Is this a compromised squareup.com account? https://pastebin.com/CxvULHF6 >From 01000163fa173c6b-7d47b00d-af5c-4755-b203-74392b57ec3d-000...@amazonses.com Wed Jun 13 13:00:20 2018 From: INVOICE# Reply-To: "A

Re: MISSING_SUBJECT

2018-06-13 Thread Matus UHLAR - fantomas
On 12.06.18 19:37, micah anderson wrote: 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: It did not have a subject, but it did have content (although only encrypted) it also hit: * 1.8 MISSING_SUBJECT Missing Subject: header which makes sense, because the mail d

Re: MISSING_SUBJECT

2018-06-13 Thread Rupert Gallagher
On Wed, Jun 13, 2018 at 10:38, Matus UHLAR - fantomas wrote: > MISSING_SUBJECT is here because when message has no Subject:, it is highly > probably spam. Right. Well, my new accountant, being an external company of 16 people, insists in sending messages without a subject, "because we always d

Re: MISSING_SUBJECT

2018-06-13 Thread micah anderson
Matus UHLAR - fantomas writes: > On 12.06.18 19:37, micah anderson wrote: >>2.3 EMPTY_MESSAGE Message appears to have no textual parts and no >>Subject: >> >>It did not have a subject, but it did have content (although only >>encrypted) it also hit: >> >>* 1.8 MISSING_SUBJECT Missing Subject

Re: MISSING_SUBJECT

2018-06-13 Thread Matus UHLAR - fantomas
On 12.06.18 19:37, micah anderson wrote: 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: It did not have a subject, but it did have content (although only encrypted) it also hit: * 1.8 MISSING_SUBJECT Missing Subject: header which makes sense, because the mail d