New Spam Format? Could be 0-day?

[Billy A. Pumphrey]

Mine shows 5 messages with the subject containing "Medicare Confirmed"
and earliest record is 27/08/06.  Only three were marked spam and that
was from listed in RBL.

Message Listing 
# Date/Time (A/D)  From (A/D)  To (A/D)  Subject (A/D)  Size (A/D)  SA
Score (A/D)  Status 
[  ] 18/09/06 10:41:02 seminvariantive at familyservicemch.org
tdinwiddie at woodmaclaw.com Charges for Medicare Confirmed. View Claim
#57704 33.3Kb 0.39 Spam 

[  ] 14/09/06 15:14:07 charpoys at brontekitchens.com
jmckean at woodmaclaw.com Charges for Medicare Confirmed. View Letter
#20343 33.3Kb 0.56 Clean 

[  ] 10/09/06 12:33:10 suspendible at siouxfallstourism.com
noconnor at woodmaclaw.com Charges for Medicare Confirmed. View Bill #64257
33.3Kb -1.60 Spam 

[  ] 03/09/06 04:10:51 celiadelphus at simplysnowflakes.com
cjacobson at woodmaclaw.com Charges for Medicare Confirmed. View Statement
#28352 33.4Kb -1.60 Spam 

[  ] 27/08/06 22:26:12 assegais at paraplegicssanjose.com
jhammond at woodmaclaw.com Charges for Medicare Confirmed. View Claim
#69312 33.4Kb -1.60 Clean

Billy Pumphrey
IT Manager
Wooden & McLaughlin

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Chris Burton
> Sent: Wednesday, September 20, 2006 8:33 AM
> To: MailScanner discussion
> Subject: Re: New Spam Format? Could be 0-day?
> 
> > I've just received a spam message with an attached MS Word document
in a
> > new
> > spin on the GIF attachment method. Has anybody else seen this
before?
> > Should
> > I be forwarding this on to other lists?
> 
> I've been seeing these for a while now (earliest example I have is
from
> Aug
> 18).
> 
> ChrisB.
> 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!
> 
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.