[Mimedefang] Filtering idea for stock pump&dumps

[Joseph Brennan]

--On Monday, July 2, 2007 13:25 -0400 "Kevin A. McGrail" 
<kmcgrail at pccc.com> wrote:

>> Hmm, what about these PDF pump and dumps that I started seeing en masse
>> in the last week or so  :(  Complete with rainbowed letters in the PDF...
>
> Yes, the PDF ones are a neat twist.  I would imagine they'll need to get
> added to the OCR plugins.  I'm worried about rules that try and trigger
> on a PDF as that's a widely-used format.  Kudos to the spammers.  It was
> a good move.


I tried and it was not good.  Starters: blank text/plain part, and
name of PDF in the subject line.  But you've got to go beyond that.

Joe