SJ, they're not viruses, they're spam sent from zombies.
Probably pump and dump stock spam, and if they're like what I've been
seeing, they have the same anti-OCR techniques that were previously sent
as jpg.
http://www.mail-archive.com/[EMAIL PROTECTED]/msg03447.html
and:
http://isc.sans.org/diary.html?storyid=3012
and:
http://www.heise-security.co.uk/news/91523
Andrew.
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of SJ.Stanaitis
Sent: Wednesday, June 27, 2007 8:17 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New PDF worm?
I'm getting gobs of PDF's snagged in my antispam filter, they're
not triggering any AV yet, anyone else seeing this?
SJ.Stanaitis - Network Administrator
Decorative Product Source, Inc.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
