...we're getting around 15,000 per day at the moment: emails containing
one line of text and a <1Kbyte zip attachment (filename varies) - which
contains a spammy HTML file.
http://pastebin.com/m493f478c
I don't expect it'll last long as a delivery system, but currently only
RBL rules have any chance of catching such things.
Is there any way to get SA to scoring zip attachments that are <1Kbyte?
There can't be real zip files with such small sizes (?)
Thanks!
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
