RE: New Spam Technique
- From: "Wheeler, Eric" <EWheeler2@xxxxxxxxx>
- Date: Mon, 23 Jul 2007 13:54:23 -0500
I was trying to think of a way to block this but its rather difficult
when the email + the subject line + the attachment + the attachment
contents are different every time
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Banyan He
Sent: Saturday, July 21, 2007 9:41 AM
Cc: tony barry; Security Basics Forum
Subject: Re: New Spam Technique
Bad news, that pdf attachment contains the advertisement or the image.
Actually, there is no appliance works on this perfectly. The pdf size
should be big or small.
Read, the nuances of catching pdf spam:noticed
----- Original Message ----- From: "tony barry" <tony@xxxxxxxxxxxxx>
To: "Security Basics Forum" <security-basics@xxxxxxxxxxxxxxxxx>
Sent: Thursday, July 19, 2007 11:04 PM
Subject: New Spam Technique
We operate several mail servers with catch all accounts and have
area lot of Mailer Daemon 'delivery failed messages mails from genuine
sites (mostly German)arriving recently. It would seem the spammers
addresssending out e-mails with a PDF attachment and a forged senders
theto bogus recipients at these organizations whose mail server rejects
onemessage and sends notification to the forged sender. We have opened
theattachment on an isolated machine and it was one of the 'watch these
stocks they're going through the roof messages (not exactly sure of
bedetails as my German is a bit rusty). My concern is that there could
confidentiala 'payload' embedded in the PDF. Is this possible?
The Simple Server Company
PO Box 51528 Pakuranga
021 413642 09 5768552
This e-mail and any attached files transmitted with it are
recievedand intended solely for the use of the addressees. If you have
this e-mail in error please inform the sender by sending a reply and
delete this message.
This email and any files transmitted with it are confidential, and may also be legally privileged. If you are not the intended recipient, you may not review, use, copy, or distribute this message. If you receive this email in error, please notify the sender immediately by reply email and then delete this email.
- Prev by Date: Re: Least privilege vs Windows server security
- Next by Date: Re: Vulnerability Assessment
- Previous by thread: Re: New Spam Technique
- Next by thread: Re: New Spam Technique