RTF attachment spam

[Martin Hepworth]

discussion on the spamassassin users list about this .
http://thread.gmane.org/gmane.mail.spam.spamassassin.general/119193/focus=119196
"application/octet-stream" Content-Type used to obfuscate terse .RTF spam
so looks like the bad guys are doing naughty things to get around mime
handling...

-- 
Martin Hepworth
Oxford, UK


2009/5/31 Paul Welsh <paul.welsh.3 at googlemail.com>

> Had a few of these today; message containing an RTF attachment of under 1k
> and no message body.  Rather like the png attachment spam that I started
> noticing in earnest a few weeks ago.
>
> Anyone know of a good spamassassin rule to detect these?
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090601/6258a045/attachment.html