That stuff gets through spam filters... On Thu, Oct 5, 2017 at 10:25 AM Kurt Buff <[email protected]> wrote:
> No external spam filter? With quarantine? > > Kurt > > On Thu, Oct 5, 2017 at 7:55 AM, Rimmel, Carl <[email protected]> wrote: > > We have been seeing an uptick in SPAM containing PDF attachments. The > PDFs > > are composed of a full-page image that, when moused-over, points to a > > malicious web site. We have tried to use Transport Rules to block these > > based on the moused-over URL but Exchange seems unable to properly detect > > these embedded URLs. We are able to use Transport Rules to block PDFs > with > > plain text so we know that the server is inspecting them properly. > > > > > > > > Any ideas on how to battle these pesky messages? > > >
