[Mimedefang] [OT] Fw: Interesting Phishing Trick

[Philip Prindeville]

David F. Skoll wrote:
> 
> You might want to change that regexp to something like:
> 
> /<a[^>]{1,200}href\s{0,10}=.{0,200}(onmouseover|onmousemouse)\s{0,10}=\s{0,10}"window\.status\s{0,10}=/i

Ah, yes.  Thanks.  And it's "onmousemove", not onmousemouse...  Sloppy
typing...

The "a", "href", and "onmousemove" are case insensitive, but the
"window.status" isn't...

If that makes any difference.

-Philip