Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: SPAM with a large Word file on the side - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
SPAM with a large Word file on the side

Scott has provided us with a new piece of SPAM with the subject "Offshore Banking & Investment" with a 1Mb Word file attachment.  Having received two in 45 minutes, this is probably the tip of the iceberg, and as Scott mentions, will definitely start to load the mail servers.

If anybody else is seeing this, please let us know.  More data will be posted as it develops.....

Thanx Scott!


150 Posts
ISC Handler
Feb 7th 2009
Probably an attempt to get around SpamAssassin. Emails with large attachments are commonly bypassed around it because of the CPU time it takes to scan them. 1 MB is a pretty common threshold because most spam is far under that size.

Sign Up for Free or Log In to start participating in the conversation!