Export Scam Rules

[Kevin Peuhkurinen <ke...@meridiancu.ca>]

I've started working on some rules to catch some pesky "export company" 
scams.   I'll expand them to include the Yukos and Con oil scams soon.   
Meanwhile, I'd appreciate any feedback.   The ruleset can be found here:

http://www.exit0.us/index.php?pagename=ExportFraudRules

Thanks,
Kevin

Re: Export Scam Rules

[Kevin Peuhkurinen <ke...@meridiancu.ca>]

Martin Hepworth wrote:

> Kevin
>
> how does this compare with
> http://www.rulesemporium.com/rules.htm#fraud
>
Hi Martin.  The reason I wrote these rules is because I use the SARE 
fraud rules, but not a single one hits on these particular emails.  An 
example of the text of the emails that I am targetting is as follows:

Dear Friend,
I am Mr.Yung Jun,we are a group of business men who
deal on import andexport raw materials into canada,america and
europe. We are searching for representatives who can help us
establish a medium of getting to ourcostumers in the canada,america and
europe as well as making payments through you to us.
Please if you are interested in transacting business with us we
willbe very glad. Please contact us for more information.Subject to
your satisfaction you will be given the opportunity tonegotiate your
mode of which wewill pay for yourservices as our representative in
canada,america and europe.
Regards.
Mr.Yung Jun,
Managing Director.

Before I created my ruleset, this email only hit BAYES_50,  DEAR_FRIEND, 
MISSING_HEADERS, SARE_FREE_WEBM_COMWALL for a total of 2.75 points.  My 
rules have been catching them faithfully now although I'm sure that the 
scammers will start changing their wording soon enough.

Kevin

Re: Export Scam Rules

[Martin Hepworth <ma...@solid-state-logic.com>]

Kevin

how does this compare with
http://www.rulesemporium.com/rules.htm#fraud

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Kevin Peuhkurinen wrote:
> I've started working on some rules to catch some pesky "export company" 
> scams.   I'll expand them to include the Yukos and Con oil scams soon.   
> Meanwhile, I'd appreciate any feedback.   The ruleset can be found here:
> 
> http://www.exit0.us/index.php?pagename=ExportFraudRules
> 
> Thanks,
> Kevin
> 

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************