Had a few of these today; message containing an RTF attachment of under 1k and no message body. Rather like the png attachment spam that I started noticing in earnest a few weeks ago. Anyone know of a good spamassassin rule to detect these?