Matti Haack wrote: > Guten Tag Micheal Espinola Jr, > > am Dienstag, 26. Juni 2007 um 19:11 schrieben Sie: > > MEJ> http://www.newsfactor.com/story.xhtml?story_id=53224 > > The last wave of german pdf-Stock-Spam could be easiely detected, as > they replaced all the german "umlaute" (äöüß) by capital "X" - so I > filtered them with a hand of regexes. > > But the next wave will be better and maybe there is a way to decode > the pdfs for baysian analytics as well.
The SaneSecurity ClamAV sigs have also been updates to detect these. http://sanesecurity.blogspot.com/2007/06/stock-spam-evolve-new-syle-pdfs.html Kevin ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
