Hi,

On Mon, Apr 2, 2018 at 8:10 AM, Kevin A. McGrail <kmcgr...@apache.org> wrote:
> Pastebin a sample(s).

We're also seeing it hit mailer-daemon emails.

https://pastebin.com/raw/UXnzEN8U

This one also hit FUZZY_AMBIEN, POISEN_SPAM_PILL (spelling incorrect)
and when I re-ran it here locally, FUZZY_DR_OZ.

The problem is that it's hitting on the mime attachments which are
apparently treated as body text in mailer-daemon emails.

ran body rule FUZZY_AMBIEN ======> got hit: "GRm8iEn"
ran body rule __FUZZY_DR_OZ ======> got hit: "DGCGS+"
ran body rule FUZZY_XPILL ======> got hit: "xxgnoX"

Reply via email to