Re: QR code phish?

[giovanni]

On 2/5/24 09:49, Matus UHLAR - fantomas wrote:

On Thu, Feb 1, 2024 at 5:01 PM Kevin A. McGrail <kmcgr...@apache.org 
<mailto:kmcgr...@apache.org>> wrote:
   Hi Alex, we are definitely seeing them.  There is code in trunk for this
   with one of the plugins and rules in the KAM ruleset using the new
   code.  LMK if you need more info.

On 2/4/24 18:56, Alex wrote:

It looks like it's tied to the Raptor service and the ExtractText plugin. Do 
you have more details on doing that?

On 05.02.24 08:31, giova...@paclan.it wrote:

you can configure ExtractText to run zbarimg(1) to extract uris from QR codes.
zbarimg(1) is available at https://zbar.sf.net or packaged on many OS.

in Debian (I assume Ubuntu as well) it's in the zbar-tools package

If you do not use any other ExtractText config line for image file types, 
zbarimg(1) can be configured on SpamAssassin 4.0 as well.

what if you do?

does ExtractText only run one of configured programs for the same type of file?

Exactly, ExtractText only run the first configured program for the same type of 
file.
 Giovanni

OpenPGP_signature.asc
Description: OpenPGP digital signature