You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/10/26 13:10:23 UTC

[Bug 4647] New: drug spammers found a new misspelling

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4647

           Summary: drug spammers found a new misspelling
           Product: Spamassassin
           Version: 3.1.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: bero@arklinux.org


Looks like drug spammers found a way to bypass __DRUGS_ERECTILE2 by using a 
new misspelling. Attaching patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4647] drug spammers found a new misspelling

Posted by bu...@bugzilla.spamassassin.org.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4647





------- Additional Comments From bero@arklinux.org  2005-10-26 13:11 -------
Created an attachment (id=3209)
 --> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=3209&action=view)
Catch spammers selling "Vjaagra"




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4647] drug spammers found a new misspelling

Posted by bu...@bugzilla.spamassassin.org.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4647





------- Additional Comments From dallase@nmgi.com  2005-10-26 16:20 -------
fyi, using double-R's also... 

UI.ttram
VjAGRR.A Now $69
V.ALLjUM Now $84
Amn.bjen
Xan.anax
Pr.oazac
CjALLj.S Now $99
Levvj.tra
Prrope.cja
So.ama



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4647] drug spammers found a new misspelling

Posted by bu...@bugzilla.spamassassin.org.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4647





------- Additional Comments From tech2@i-is.com  2005-10-26 14:08 -------
I am using:
body    FB_VJAAGRA	/\bvja[ag]gra\b/i

I've seen with double a's and double g's.

OVERALL%   SPAM%     HAM%     S/O    RANK  SCORE  NAME
 181483   174632     6851    0.962   0.00   0.00  (all messages)
     22       22        0    1.000   0.37   2.90  FB_VJAAGRA



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.