[sniffer]Re[2]: [sniffer]Ebay Phishing Emails getting through

2006-05-18 Thread Pete McNeil
Hello Andrew,

Wednesday, May 17, 2006, 5:35:36 PM, you wrote:

 Certainly, submitting samples to spam@ (or preferably your 
 local spam submission point polled by our bots) will put 
 these messages in front of us if we have not already created 
 rules for them.

 I've just manually submitted the ~35 messages that my filters triggered
 on for phishing that didn't trigger Message Sniffer today but ended up
 in my HOLD folder anyway due to their total spamminess.

 Most of them are against eBay and came from Germany.

If your overall false positive rate is low enough then it would be
great if you could automate that process to create a synthetic
spamtrap. Somehow, take the most spammy of the messages that get past
SNF and send them to a special account on your system from which our
robots could pull the messages Since we code rules 24x7x365 we
would be able to respond to these quickly and (from your perspective)
automatically.

_M


-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer]Re[2]: [sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Pete McNeil
Hello Daniel,

Wednesday, May 17, 2006, 3:07:38 PM, you wrote:

 I've gotten one myself.

 The pharmacy ones, are still coming through too for that matter.

Here is what the latest wave has looked like from here (attached
image).

You can see, starting about 24 hours ago a jagged, but fairly regular
climbing series of spikes. Each is a new wave of variants on the
current campaigns. Most notably, the the medications drug spam,
chatty drugs, russian porn, phishing (especially localized versions),
and stuff-for-free* surveys.

Of course a variety of the usual players is well mixed in.

During the previous 24 hours things were _relatively_ quiet.

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.

getchart.jsp.png
Description: PNG image
#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]