[Mimedefang] Heads up - stock pump'n'dump SPAM as ZIP (actuallyRAR) attachments

[Kevin A. McGrail]

> Yes; we are.  We hold ZIP files, so none is getting through, but I
> guess we'll need a new rule to block them. :-(

Wow, this seems to me on the increase right now for us.  We are seeing one a 
minute or more:

Jul 31 08:06:52 intel1 mimedefang.pl[26982]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-2.zip
Jul 31 08:07:20 intel1 mimedefang.pl[27062]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-2.zip
Jul 31 08:07:20 intel1 mimedefang.pl[27062]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-4.zip
Jul 31 08:07:25 intel1 mimedefang.pl[27085]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-2.zip
Jul 31 08:07:43 intel1 mimedefang.pl[26982]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-11.zip
Jul 31 08:11:46 intel1 mimedefang.pl[27070]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-19.zip
Jul 31 08:11:50 intel1 mimedefang.pl[26973]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-17.zip
Jul 31 08:12:24 intel1 mimedefang.pl[27001]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-46.zip
Jul 31 08:12:45 intel1 mimedefang.pl[27070]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-21.zip
Jul 31 08:13:48 intel1 mimedefang.pl[26982]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-81.zip
Jul 31 08:14:02 intel1 mimedefang.pl[27062]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-36.zip
Jul 31 08:14:43 intel1 mimedefang.pl[27052]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-18.zip
Jul 31 08:15:45 intel1 mimedefang.pl[27085]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-19.zip
Jul 31 08:16:22 intel1 mimedefang.pl[27001]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-79.zip
Jul 31 08:16:55 intel1 mimedefang.pl[27059]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-54.zip
Jul 31 08:17:56 intel1 mimedefang.pl[26978]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-34.zip
Jul 31 08:18:01 intel1 mimedefang.pl[26978]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-36.zip
Jul 31 08:19:05 intel1 mimedefang.pl[26978]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-50.zip
Jul 31 08:19:31 intel1 mimedefang.pl[26982]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-130.zip
Jul 31 08:20:30 intel1 mimedefang.pl[30638]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-7.zip
Jul 31 08:21:54 intel1 mimedefang.pl[28086]: Discarding because of RAR file 
disguised as ZIP File Work/msg-26953-27.zip

Regards,
KAM