Re: [External] [ZeroDay] Spam with broken URI (Zero-Width-Space Unicode characters)
"Kevin A. McGrail" <[email protected]>
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Message-ID | <[email protected]> |
You might want to look at the KAM ruleset and look at the ZW rules as well. -KAM On 2/21/2025 5:41 PM, Michel Arboi wrote: > I received this phishing spam yesterday. That was not the first of > this kind. (attached, w/o the image) > > I thought about this and wrote this uri-bad-unicode.cf Insert it > in your local.cf or in /etc/spammassin, adjust the scores and restart > spamd. Comments welcome. > > > I am pretty sure there are more nasty Unicode characters. Also we should > make sure that Unicode is properly normalized. See RFC 8264 and > Unicode::Precis::Preparation on CPAN. -- Kevin A. McGrail [email protected] Member, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171