Re: [External] [ZeroDay] Spam with broken URI (Zero-Width-Space Unicode characters)

Andrew C Aitchison <[email protected]> Sat, 22 Feb 2025 21:06:05 +0000 (GMT)

Newsgroups	gmane.mail.spam.spamassassin.general
Message-ID	<[email protected]>

On Sat, 22 Feb 2025, Michel Arboi wrote:

> On Sat, 22 Feb 2025 12:31:37 -0500
> "Kevin A. McGrail" <[email protected]> wrote:
>
>> You might want to look at the KAM ruleset
>
> Interesting. KAM_REPLACE and KAM_OBFURL I suppose?
>
>> and look at the ZW rules as  well. -KAM
>
> Where is it? I found a couple of blog articles on zero width characters
> used for obfuscation, but no complete ruleset.
> (I noticed that &shy; is also an unwanted character)

Would it be worth including codes that control text direction,
like "Trojan Source" - CVE-2021-42574 and CVE-2021-42694.

-- 
Andrew C. Aitchison                      Kendal, UK
                    [email protected]