On Wed, 5 Mar 2025, Tom Hendrikx wrote:
Hi,
Just received a, what seems to be, incorrectly used template for generating
mail bodies for bitcoin ripoffs.
Interesting to see all the variants and diacritics used. Maybe we can improve
some rules based on the variants.
There are already a bunch of FUZZY_ rules looking for Unicode obfuscation
of plain text. I'm positive that the rules that look for
visually-similar substutions are incomplete, as the Unicode glyph space is
so f'ing huge.
I never received anything like this, so sharing for the people
interested.
Thanks, samples are always welcome.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Failure to plan ahead on someone else's part does not constitute
an emergency on my part. -- David W. Barts in a.s.r
-----------------------------------------------------------------------
4 days until Daylight Saving Time begins in U.S. - Spring Forward
