On Wed, 18 Feb 2015, Tonyata wrote:
Thanks for your feedback, much appreciated
We do regularly review our AV solution and are generally happy with what we
have in place. The issue was and continues to be that this is new variant
Malware so by the time the AV's catch-up we already have a number of mails
received in the Userbase.
Was kinda hoping for some clever spam rule trickery to combat this but maybe I
should just reset my expectations :)
But in any case, any further suggestions/comments are gratefully received.
<plug
type="shameless">http://impsec.org/email-tools/procmail-security.html</plug>
Not signature-based. I believe the current dev version (1.152pre8) catches
the current VB download scripting. Feel free to forward me some samples if
you like.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
The most glaring example of the cognitive dissonance on the left
is the concept that human beings are inherently good, yet at the
same time cannot be trusted with any kind of weapon, unless the
magic fairy dust of government authority gets sprinkled upon them.
-- Moshe Ben-David
-----------------------------------------------------------------------
4 days until George Washington's 283rd Birthday
