You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2018/10/21 19:11:28 UTC
svn commit: r1844511 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Sun Oct 21 19:11:27 2018
New Revision: 1844511
URL: http://svn.apache.org/viewvc?rev=1844511&view=rev
Log:
Tweak bitcoin extortion rule, add more general bitcoin rules
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=1844511&r1=1844510&r2=1844511&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Sun Oct 21 19:11:27 2018
@@ -1916,6 +1916,15 @@ meta BITCOIN_SPAM_04 __BITCOI
describe BITCOIN_SPAM_04 BitCoin spam pattern 04
score BITCOIN_SPAM_04 1.500 # limit
+meta BITCOIN_SPAM_05 __BITCOIN_ID && __SPOOFED_FREEMAIL
+describe BITCOIN_SPAM_05 BitCoin spam pattern 05
+score BITCOIN_SPAM_05 2.500 # limit
+
+meta BITCOIN_SPAM_06 __BITCOIN_ID && TVD_RCVD_SPACE_BRACKET
+describe BITCOIN_SPAM_06 BitCoin spam pattern 06
+score BITCOIN_SPAM_06 1.500 # limit
+
+
ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
body __MY_VICTIM /(?:<H><I>|<H><E><L><L><O>),?(?:\s<M><Y>)?\s<V><I><C><T><I><M>/i
replace_rules __MY_VICTIM
@@ -1940,10 +1949,14 @@ else
body __YOUR_PERSONAL /\byour\spersonal\s(?:info(?:rmation)?|data)\b/i
body __HOURS_DEADLINE /\bgive\syou\s\d+\shours\b/i
endif
-meta BITCOIN_EXTORT_01 __BITCOIN_ID && __MY_VICTIM && __MY_MALWARE && __PAY_ME && ( __YOUR_WEBCAM + __YOUR_ONAN + __YOUR_PERSONAL + __HOURS_DEADLINE) > 2
+meta BITCOIN_EXTORT_01 __BITCOIN_ID && __MY_MALWARE && __PAY_ME && ( __MY_VICTIM + __YOUR_WEBCAM + __YOUR_ONAN + __YOUR_PERSONAL + __HOURS_DEADLINE) > 2
describe BITCOIN_EXTORT_01 Extortion spam, pay via bitcoin
score BITCOIN_EXTORT_01 4.750 # limit
+meta BITCOIN_PAY_ME __BITCOIN_ID && __PAY_ME
+describe BITCOIN_PAY_ME Pay me via bitcoin
+score BITCOIN_PAY_ME 2.500 # limit
+
#body NUM_FREE /\b\d+free/i
#describe NUM_FREE Number + free