[clamav-users] Spam warning
Gene Heskett
gheskett at shentel.net
Wed Apr 18 17:10:26 UTC 2018
Hey guys;
Do not open any so-called invoice attachment that ends in an .rOO, I'm
getting a boatload of them that spamassassin is catching, and I suspect
the file attached has links to download and display an invoice for
thousands, is actually an attack vector file. Clamd passed it, but I
suspect its too new. The name of the file also has spaces, meaning it
came from a winderz box.
The .r00 files attached are not the same lengths, but are 300k to 500k in
lengths.
And I've never heard of the names used for reply addresses.
--
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>
More information about the clamav-users
mailing list