RE: Patterns for list broker spam?

> Every day I get a bunch of spam from fake list brokers, invariably from
> throwaway Gmail or Outlook
> accounts.

What is helping me a lot is when the message has a softfail spf state and an envelope with @outlook.com / @gmail.com I override the ~all and treat is as -all 

Maybe check if your messages match this.

> The text in them seems fairly consistent.  Anyone have patterns to catch
> them?  They're quite annoying
> since they're hard to separate from the legit mail we get from giant
> mail systems.
> 
> TIA
> 
> PS: One time I got spam offering a 3000 name list of attendees from a
> recent IETF meeting which was
> pretty impressive since only 1000 people were there.

:)