Re: Spam body template with diacritics and variants

John Hardin <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
On Wed, 5 Mar 2025, Tom Hendrikx wrote:

> Hi,
>
> Just received a, what seems to be, incorrectly used template for generating 
> mail bodies for bitcoin ripoffs.
>
> Interesting to see all the variants and diacritics used. Maybe we can improve 
> some rules based on the variants.

There are already a bunch of FUZZY_ rules looking for Unicode obfuscation 
of plain text. I'm positive that the rules that look for 
visually-similar substutions are incomplete, as the Unicode glyph space is 
so f'ing huge.

> I never received anything like this, so sharing for the people 
> interested.

Thanks, samples are always welcome.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  [email protected]                         pgpk -a [email protected]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Failure to plan ahead on someone else's part does not constitute
   an emergency on my part.                 -- David W. Barts in a.s.r
-----------------------------------------------------------------------
  4 days until Daylight Saving Time begins in U.S. - Spring Forward
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.