Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

PDF Spam

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> PDF Spam Page: [1] 2 3 4 5   next >   >>
Login
Message << Older Topic   Newer Topic >>
PDF Spam - 26.Jun.2007 7:07:41 AM   
mccombinc

 

Posts: 3
Joined: 22.Aug.2006
Status: offline 		So, it now seems that spammers have turned from image spam to PDF spam. In the last day, we have been getting flooded with email that have PDF attachments containing spam messages.  I assume there is currently nothing we can do with MailEssentials to prevent this?  Is there something in the works?
Post #: 1
RE: PDF Spam - 26.Jun.2007 12:54:23 PM   
jdo

 

Posts: 3
Joined: 26.Jun.2007
Status: offline 		hi, same problem here.
training the bayes filter does not seem to work, since the pdf spam mails sometimes don't contain any text.

(in reply to mccombinc)
Post #: 2
RE: PDF Spam - 27.Jun.2007 6:21:51 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline 		This issue is currently being handled by e-mail support. The reference number(s) used are:

jdo - 159329
mccombinc - 159313

NOTE: We have sent you an email on the address that you have registered over the forums with.

Should you require any updates or further information, kindly contact us using the support form at the following link:

http://support.gfi.com/supportrequestform.asp

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to jdo)
Post #: 3
RE: PDF Spam - 27.Jun.2007 8:47:59 AM   
Mc G

 

Posts: 4
Joined: 13.Apr.2005
Status: offline 		Hi, are there any news to this problems, because on my site we are currently moving from McAfee Groupshield to MailEssentials and i have now a mixed environment. And the bad part for GFI is that Groupshield block those PDF Spam.

(in reply to Mark Busuttil)
Post #: 4
RE: PDF Spam - 27.Jun.2007 8:49:29 AM   
jtincher

 

Posts: 8
Joined: 11.Oct.2006
From: Jeff T
Status: offline 		we just got our first one of these emails today.

i had read an article on techdirt.com regarding these new pump and dump stock scam emails.

http://www.techdirt.com/articles/20070622/143642.shtml

(in reply to Mc G)
Post #: 5
RE: PDF Spam - 27.Jun.2007 10:13:12 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline 		At this point, the only way that you are able to block these spam emails is to add the following phrase to the Keyword Checking Module:

"Report For"

Note: We are currently investigating this issue.

Thank you!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to jtincher)
Post #: 6
RE: PDF Spam - 27.Jun.2007 11:15:06 AM   
dima

 

Posts: 40
Joined: 10.Feb.2006
Status: offline 		Actually, ME12 on our server has been blocking these PDF-attachment emails just fine since yesterday, without any intervention form the IT admin. Just thought I'd share.

--
Dima

(in reply to Mark Busuttil)
Post #: 7
RE: PDF Spam - 27.Jun.2007 12:16:05 PM   
Ailios

 

Posts: 74
Joined: 28.Nov.2005
Status: offline 		Dima, which filter is catching the PDF in your setup?  They're showing up here too and I have ME 12. 

(in reply to dima)
Post #: 8
RE: PDF Spam - 27.Jun.2007 12:19:00 PM   
rhyno

 

Posts: 60
Joined: 20.Jan.2004
Status: offline 		We've started to get hit with this new junk just this past week.  Every one has gotten through ME12.

One sample message had no body, phony name/email (of course), and a subject & attachment name of "Magazine.nd.pdf".  As per the recent reports, this one was a stock pump-n-dump scam with jagged, terminal-style, multi-colored lettering -- ostensibly to thwart OCR recognition.

Would love to see GFI tackle this new breed of crap ASAP... especially seeing as how our license(s) are up for renewal!

(in reply to dima)
Post #: 9
RE: PDF Spam - 27.Jun.2007 12:25:19 PM   
Ailios

 

Posts: 74
Joined: 28.Nov.2005
Status: offline 		One of the ones I looked at this morning when the user opened the attached PDF file it launched a webpage that spammer wanted the user to see. It was something to do with stocks but that could change as the idea catches on with other spammers. And who's to say those webpages are safe and don't contain worms or trojans.

(in reply to rhyno)
Post #: 10
RE: PDF Spam - 27.Jun.2007 1:20:53 PM   
dima

 

Posts: 40
Joined: 10.Feb.2006
Status: offline 		Our Bayesian and SPF modules have been catching all the PDF spam.

--
Dima

(in reply to Ailios)
Post #: 11
RE: PDF Spam - 28.Jun.2007 12:56:03 PM   
jlostanau

 

Posts: 3
Joined: 28.Jun.2007
Status: offline 		HI, I have the same problem, but what I realized that in the subject "always" are the .pdf extension, but the keyword checking doesn't filter the .pdf word, only filter pdf, I just filter all the subjects that contain the pdf word, please check this dot issue, and sorry for my bad english, thanks

(in reply to mccombinc)
Post #: 12
RE: PDF Spam - 2.Jul.2007 5:43:26 AM   
kcssolutions

 

Posts: 2
Joined: 25.Jan.2005
Status: offline 		Hi,

Same problem here,

PDF spam started here at our office and several of our customers and is not being filtered by ME12

Any updates?

(in reply to mccombinc)
Post #: 13
RE: PDF Spam - 2.Jul.2007 6:56:58 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline 		Please note that we are actively monitoring this thread.

We are still investigating the issue being discussed within this thread, spam being sent with a PDF attachment.

We shall keep you informed.

Thank you!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to kcssolutions)
Post #: 14
RE: PDF Spam - 2.Jul.2007 9:07:07 AM   
brandonassoc

 

Posts: 48
Joined: 4.Jan.2005
Status: offline 		We are getting tons of these as well....

(in reply to Mark Busuttil)
Post #: 15
Page:   [1] 2 3 4 5   next >   >>
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> PDF Spam Page: [1] 2 3 4 5   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts