> Certainly, submitting samples to spam@ (or preferably your > local spam submission point polled by our bots) will put > these messages in front of us if we have not already created > rules for them.
I've just manually submitted the ~35 messages that my filters triggered on for phishing that didn't trigger Message Sniffer today but ended up in my HOLD folder anyway due to their total spamminess. Most of them are against eBay and came from Germany. Andrew 8) > -----Original Message----- > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Wednesday, May 17, 2006 12:53 PM > To: Message Sniffer Community > Subject: Re: [sniffer]Ebay Phishing Emails getting through > > Hello Jim, > > Wednesday, May 17, 2006, 2:46:48 PM, you wrote: > > > Has anyone else been getting an excess amount of ebay > phishing emails > > making it through sniffer today? I have personally > received a couple > > of them and have multiple users reporting the same. I have > forwarded > > them to the sniffer spam@ address if you can take a look > Pete it would > > be much appreciated. > > <ot> > > Ah... So the list is working :-) I'll have to update the > signup instructions... I can check that off the list. > > </ot> > > Today, starting at about 0100 E, the blackhats really took it > up a notch. I know because I was on duty making rules at the time. > > One of the things I saw a lot of were new phishing attacks - > all varieties and variants. > > I know the team has been pushing hard on these, but some are > bound to get through on the first few passes. > > Another thing we've noticed in the grand scheme is that > localized phishing attacks are becoming more common. These > are less likely to hit our spamtraps since the target lists > used are highly regional -- so if we don't have a spamtrap in > that geography our view of the spam may be delayed. We're > working on this problem on a number of fronts.. > Ideas, as always, are welcome. > > Certainly, submitting samples to spam@ (or preferably your > local spam submission point polled by our bots) will put > these messages in front of us if we have not already created > rules for them. > > _M > > -- > Pete McNeil > Chief Scientist, > Arm Research Labs, LLC. > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[email protected]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
