[clamav-users] Spam warning

Gene Heskett gheskett at shentel.net
Wed Apr 18 17:10:26 UTC 2018


Hey guys;

Do not open any so-called invoice attachment that ends in an .rOO, I'm 
getting a boatload of them that spamassassin is catching, and I suspect 
the file attached has links to download and display an invoice for 
thousands, is actually an attack vector file. Clamd passed it, but I 
suspect its too new. The name of the file also has spaces, meaning it 
came from a winderz box.

The .r00 files attached are not the same lengths, but are 300k to 500k in 
lengths.

And I've never heard of the names used for reply addresses.

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>



More information about the clamav-users mailing list