[sniffer] Re: Am I submitting to s...@sortmonster.com properly

2006-08-22 Thread Pete McNeil
Hello David, I think this format should come through fine. Phishing is a constant challenge because it is so variable and so close to a legitimate message (on purpose). I will code some rules for the message you submitted and I'm sure Jason (Lead Rule Tech) will see this note and help us watch

[sniffer] Re: Am I submitting to s...@sortmonster.com properly

2006-08-22 Thread Jim Matuska Jr.
Pete, Is there any way to deal with the other new attachment based spasm we have been seeing recently? I see a lot coming in that only say here is your invoice and have an invoice.doc (or similar attachment). Inside the word file is the spam itself. I've seen a bunch of these in the last week

[sniffer] Re: Am I submitting to s...@sortmonster.com properly

2006-08-22 Thread Pete McNeil
Hello Jim, I've started working on some of these also. SNF usually does look inside file attachments so it's possible we can get to some of the raw content -- in fact, most of it is already coded - but being inside all of the binary cruft in a word document is keeping it out of the scanning