New Spam?

Seamus Allan seamus at rheelweb.co.nz
Mon Sep 10 22:01:08 IST 2007


Hi guys,

I don't *think* I have seen this mentioned, but I got an interesting 
piece of spam this morning.
It was an HTML email with the words Viagra and Cialis in it, and a small 
amount of random lettering right aligned. My scanner let it through, 
giving it scores for obfuscated text, but nothing for the words. 
Puzzled, I highlighted the word Viagra, and to my surprise half of the 
random text on the right selected too. I think they are using DIV's or 
something to hide text in text, but display it correctly to be read.
I have uploaded a copy of the file if anyone wants to have a look, 
perhaps you'll see some of this in your inbox's soon?
Any ideas on how to catch this?

http://files.rheelweb.co.nz/spam.txt
http://files.rheelweb.co.nz/spam.eml

Cheers

Seamus


More information about the MailScanner mailing list