Differences between revisions 1 and 2
Revision 1 as of 2008-06-18 21:56:59
Size: 559
Editor: LeeMaguire
Comment:
Revision 2 as of 2009-09-20 23:16:51
Size: 563
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 13: Line 13:
The default scores for this rule can be found [http://spamassassin.apache.org/tests.html in the online list of tests]. The default scores for this rule can be found [[http://spamassassin.apache.org/tests.html|in the online list of tests]].
Line 15: Line 15:
See ''[http://www.secureworks.com/research/threats/ronpaul/ Inside the "Ron Paul" Spam Botnet]''. See ''[[http://www.secureworks.com/research/threats/ronpaul/|Inside the "Ron Paul" Spam Botnet]]''.

SpamAssassin Rule: JM_REACTOR_MAILER

Standard description: Header patterns indicative of "Reactor Mailer" ratware

Explanation

This matches a series of signatures in the mail header indicating it was sent by the "Reactor Mailer" / Trojan.Srizbi .

Further Info

The default scores for this rule can be found in the online list of tests.

See Inside the "Ron Paul" Spam Botnet.


CategoryRule

Rules/JM_REACTOR_MAILER (last edited 2009-09-20 23:16:51 by localhost)