Re: QR phish missed

> > > dbg: extracttext: [3209409] (/usr/bin/zbarimg) finished: exit 1 > dbg: extracttext: [3209409] (/usr/bin/zbarimg) stderr output: execvp > failed, errno = 2 (No such file or directory) > warn: extracttext: error from /usr/bin/zbarimg, please verify > configuration: execvp failed, errno = 2 (No

Re: QR phish missed

Hi, > On Sat, Aug 17, 2024 at 12:14 PM wrote: > >> On 8/16/24 2:03 PM, Alex wrote: >> > The body was empty with a PDF attachment. It's too big for pastebin. >> > >> https://drive.google.com/file/d/1FzBgTKoBgRp7TWkqjWqSqqESYmCGH0G2/view?usp=sharing >> < >> https://drive.google.com/file/d/1FzBgTKoB

Re: QR phish missed

Hi, On Sat, Aug 17, 2024 at 12:14 PM wrote: > On 8/16/24 2:03 PM, Alex wrote: > > The body was empty with a PDF attachment. It's too big for pastebin. > > > https://drive.google.com/file/d/1FzBgTKoBgRp7TWkqjWqSqqESYmCGH0G2/view?usp=sharing > < > https://drive.google.com/file/d/1FzBgTKoBgRp7TWkqj

Re: QR phish missed

On 8/16/24 2:03 PM, Alex wrote: The body was empty with a PDF attachment. It's too big for pastebin. https://drive.google.com/file/d/1FzBgTKoBgRp7TWkqjWqSqqESYmCGH0G2/view?usp=sharing Any success stories with s

Re: QR phish missed

On 2024-08-16 at 08:03:05 UTC-0400 (Fri, 16 Aug 2024 08:03:05 -0400) Alex is rumored to have said: It says that SPF failed, but SPF_PASS was hit, presumably from our connection to Microsoft, not their connection to the spammer client: Correct. You can only check SPF on the first SMTP transact

QR phish missed

Hi, This is a QR phish, and I haven't full set up zbar and ExtractText yet, but I'm hoping someone could look at this and try to identify other issues that would be helpful in blocking this. It hit a couple of my local basic testing rules, but that's about it. X-Spam-Status: No, score=2.457 tagge