Please help, apparently this person "knows everything about me" :)
I got a rash of these a year or two ago, and have started getting a few more
reciently. I haven't looked at the body of the recient ones, so don't know
if they are still using the standard text. However, the identiying feature
is that the subject is a single word, which is the stolen password.
You should be able to catch these with a single custom rule along the lines
of
header STOLEN_PASSWORD Subject =~ /old_password/
score STOLEN_PASSWORD 10
Loren
