phishing net FP-ing on it's own messages

[Martin Hepworth]

Julian

here's a fun on. If MS finds a phishinh exploit and marks up the html,
then the email is forwarded via an alias or replied to with the body
intact it double marks the email as a phishing attack.

  Found phishing fraud from www.shufirm.com claiming to be
www.mailscannerhasdetectedapossiblefraudattemptfrom"www.shufirm.com"claimingtobe
in 1D7I0Y-0000Eh-MD

This was in 4.39-9. now running 4.40-2 and haven't seen an offending
email in the last couple of days.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!