You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@spamassassin.apache.org by gb...@apache.org on 2018/05/21 13:38:41 UTC

svn commit: r1831972 - /spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf

Author: gbechis
Date: Mon May 21 13:38:41 2018
New Revision: 1831972

URL: http://svn.apache.org/viewvc?rev=1831972&view=rev
Log:
Detect .jar malware hosted on Dropbox

Added:
    spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf

Added: spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf?rev=1831972&view=auto
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf (added)
+++ spamassassin/trunk/rulesrc/sandbox/gbechis/20_misc.cf Mon May 21 13:38:41 2018
@@ -0,0 +1,3 @@
+uri  __MALWARE_DROPBOX_JAR_URI   m;^https?://[^.]+\.dropbox\.com/(\w+)/(\w+)/(\w+)\.jar\?dl\=1;i
+meta MALWARE_DROPBOX_JAR_URI	( __MALWARE_DROPBOX_JAR_URI && (HTML_SHORT_LINK_IMG_1 || HTML_SHORT_LINK_IMG_2 || HTML_SHORT_LINK_IMG_3) )
+describe MALWARE_DROPBOX_JAR_URI Dropbox that forces user to download jar file