Re: Finance / Tech spam

On 2025-06-05 at 18:54:09 UTC-0400 (Fri, 6 Jun 2025 00:54:09 +0200)
Tom Hendrikx <[email protected]>
is rumored to have said:

[...]
> Hi,
>
> I see some patterns like the recurring pipe and dash characters in 
> From lines. But maybe you can share a few full messages with headers? 
> Maybe there are easier ways to whack this mole.

+1

Subject and From headers simply are not adequate to figure out a 
solution to a complex determination of a class of messages.

I can say that I see very few such messages making it to SpamAssassin, 
so this is probably a case of specific few target addresses having found 
their way onto a small number of mailing lists whose spammers are 
"clean" enough to safely work through large ESPs.

-- 
  Bill Cole
  [email protected] or [email protected]
  (AKA @[email protected] and many *@billmail.scconsult.com 
addresses)
  Not Currently Available For Hire