RTF attachment spam

Martin Hepworth maxsec at gmail.com
Mon Jun 1 09:53:54 IST 2009

discussion on the spamassassin users list about this .
"application/octet-stream" Content-Type used to obfuscate terse .RTF spam
so looks like the bad guys are doing naughty things to get around mime

Martin Hepworth
Oxford, UK

2009/5/31 Paul Welsh <paul.welsh.3 at googlemail.com>

> Had a few of these today; message containing an RTF attachment of under 1k
> and no message body.  Rather like the png attachment spam that I started
> noticing in earnest a few weeks ago.
> Anyone know of a good spamassassin rule to detect these?
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> Before posting, read http://wiki.mailscanner.info/posting
> Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090601/6258a045/attachment.html

More information about the MailScanner mailing list