<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>Spam Filter ISP Forums : Nigerian spam now using PDF&#039;s</title>
  <link>https://www.logsat.com/spamfilter/forums/</link>
  <description><![CDATA[This is an XML content feed of; Spam Filter ISP Forums : Spam Filter ISP Support : Nigerian spam now using PDF&#039;s]]></description>
  <pubDate>Tue, 10 Mar 2026 11:21:19 +0000</pubDate>
  <lastBuildDate>Fri, 21 Aug 2009 13:21:28 +0000</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 11.04</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6739</WebWizForums:feedURL>
  <image>
   <title><![CDATA[Spam Filter ISP Forums]]></title>
   <url>https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png</url>
   <link>https://www.logsat.com/spamfilter/forums/</link>
  </image>
  <item>
   <title><![CDATA[Nigerian spam now using PDF&#039;s : Actually it did... SpamFilter...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13138&amp;title=nigerian-spam-now-using-pdfs#13138</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=8">LogSat</a><br /><strong>Subject:</strong> 6739<br /><strong>Posted:</strong> 21 August 2009 at 1:21pm<br /><br />Actually it did... SpamFilter was both scanning for images within the PDF files for spam-like content, and it was also using the list of keywords to scan for them within the PDF content as well.]]>
   </description>
   <pubDate>Fri, 21 Aug 2009 13:21:28 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13138&amp;title=nigerian-spam-now-using-pdfs#13138</guid>
  </item> 
  <item>
   <title><![CDATA[Nigerian spam now using PDF&#039;s : The PDF scanner that WAS included...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13137&amp;title=nigerian-spam-now-using-pdfs#13137</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=104">yapadu</a><br /><strong>Subject:</strong> 6739<br /><strong>Posted:</strong> 21 August 2009 at 8:57am<br /><br />The PDF scanner that WAS included with spamfilter did not allow us to run keywords against it anyway did it?&nbsp; It used some super secret methods to determine if the PDF was spam or not.]]>
   </description>
   <pubDate>Fri, 21 Aug 2009 08:57:25 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13137&amp;title=nigerian-spam-now-using-pdfs#13137</guid>
  </item> 
  <item>
   <title><![CDATA[Nigerian spam now using PDF&#039;s :  Here is the content of the PDF....]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13136&amp;title=nigerian-spam-now-using-pdfs#13136</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=102">WebGuyz</a><br /><strong>Subject:</strong> 6739<br /><strong>Posted:</strong> 20 August 2009 at 8:22pm<br /><br /><B><FONT size=2 face=Arial-BoldMT><FONT size=2 face=Arial-BoldMT><P align=left>Here is the content of the PDF. Look familiar?</P><DIV><table width="99%"><tr><td class="BBquote"><img src="forum_images/quote_box.png" title="Quote" alt="Quote" style="vertical-align: text-bottom;" /> FROM THE DESK MR. LARRY MOSONGO.</DIV><P align=left>RAND MERCHANT BANK</P><P align=left>TEL: +27 733480908</P><P align=left>FAX: +27 866588288</P><P align=left>EMAIL: lrry_m@hotmail.com</P><P align=left>ATTENTION: SIR/MADAM</P><P align=left>STRICTLY CONFIDENTIAL</P></FONT></FONT><FONT size=3 face=Tahoma-Bold><FONT size=3 face=Tahoma-Bold><P align=left>I know that you will be surprised to receive this letter. First and foremost, I apologize using this</P><P align=left>medium to reach you for a transaction/business of this magnitude, but this is due to confidentiality</P><P align=left>and prompt access reposed on this medium. Be informed that I obtained your enviable credentials/</P><P align=left>particulars from the South African Export Promotion Council. I have decided to seek a confidential</P><P align=left>co-operation with you in the execution of the deal described here under for the benefit of</P><P align=left>both parties.</P><P align=left>I am MR. LARRY MOSONGO, credit officer of Rand Merchant Bank South Africa. On October 6, 2005</P><P align=left>an American consultant/contractor with South African Solid Mineral Corporation. Mr. David</P><P align=left>Creanga made a fixed Deposit for Twelve calendar month valued at US$7, 350, 050.00 (Seven</P><P align=left>Million Three Hundred and Fifty Thousand and Fifty United States Dollars only) in my branch.</P><P align=left>Upon maturity I sent a routine notification to his forwarding address but no reply, after a month</P><P align=left>we sent a reminder and finally we discovered from his contract employers the South African Solid</P><P align=left>Mineral Corporation that Mr. David Creanga died in a fatal motor accident along Pretoria -</P><P align=left>Johannesburg expressway and all attempts to trace his next of kin was fruitless .</P><P align=left>I therefore made further investigation and discovered that Mr. David Creanga did not declare any</P><P align=left>kin or relations in all his official documents including his bank deposit paperwork in my bank. This</P><P align=left>sum of US$7, 350, 050.00 is still in my bank and the interest is being rolled over with the principal</P><P align=left>sum at the end of each year.</P><P align=left>No one will ever come forward to claim it, according to the South African foreign and defenses</P><P align=left>affairs at the expiration of 5(five) years such funds will revert to the ownership of South African</P><P align=left>Government for financing military operations such as arms purchasing and ammunitions for the</P><P align=left>military.</P><P align=left>In order to avert this negative development, I will like to seek for your permission as a foreigner to</P><P align=left>stand as the next of kin to Mr. David Creanga so that the fruit of this old man's labor will not be</P><P align=left>use for financing weapons which will further enhance the causes of war in the world in general.</P><P align=left>The money will be paid into your account for us to share in the ratio of 60% for me and 40% for</P><P align=left>you.</P><P align=left>There is no risk at all as all the paperwork for this transaction will be done by my attorney and</P><P align=left>with my position as the credit officer guarantees the successful execution of this transaction. If</P><P align=left>you are interested please reply immediately. Upon your response, I shall then provide you with</P><P align=left>more details that will help you understand the transaction. You should observe utmost</P><P align=left>confidentiality and be rest assured that this transaction would be most profitable for both us</P><P align=left>because I shall require your assistance to invest my share in your country.</P><P align=left>PLEASE CONTACT ME ON MY PRIVATE EMAIL AND TELEPHONE WITH YOUR INFORMTION</P><P align=left>NAME……………………………….</P><P align=left>AGE……………………………….</P><P align=left>ADDRESS ……………………………….</P><P align=left>DIRECT PHONE……………………………….</P><P align=left>MOBILE……………………………….</P><P align=left>OCCUPATION……………………………….</P><P align=left>COMPANY……………………………….</P><P align=left>COUNTRY……………………………….</P><P align=left>I will await your urgent response.</P><P align=left>Kindly reply me through: lrry_m@hotmail.com</P><P align=left>Thanks and regards</P></FONT></FONT><FONT size=2 face=Tahoma-Bold><FONT size=2 face=Tahoma-Bold><P align=left>Mr. Larry Mosongo.</P></B></FONT></FONT><FONT size=1 face=Tahoma><FONT size=1 face=Tahoma><P align=left>Copyright 2009 Rand Merchant Bank. All rights Reserved.</P><P align=left>Rand Merchant Bank registration number: 1986/004794/06.</P></FONT></FONT><FONT color=#0000ff size=1 face=Tahoma><FONT color=#0000ff size=1 face=Tahoma><FONT color=#0000ff size=1 face=Tahoma><P>Authorized financial</td></tr></table></P></FONT></FONT></FONT>]]>
   </description>
   <pubDate>Thu, 20 Aug 2009 20:22:56 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13136&amp;title=nigerian-spam-now-using-pdfs#13136</guid>
  </item> 
  <item>
   <title><![CDATA[Nigerian spam now using PDF&#039;s : Ouch... Actually that was possible...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13134&amp;title=nigerian-spam-now-using-pdfs#13134</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=8">LogSat</a><br /><strong>Subject:</strong> 6739<br /><strong>Posted:</strong> 20 August 2009 at 6:02pm<br /><br />Ouch... Actually that was possible until SpamFilter 4.1.2.810. Please see the release note below&nbsp;<img src="https://www.logsat.com/spamfilter/forums/smileys/smiley18.gif" border="0" alt="Ouch" title="Ouch" />...<div><br></div><div><br></div><div><span ="Apple-style-span" style="font-family: Helvetica, Arial, sans-serif; line-height: 20px; "><div style="padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">// New to VersionNumber = '4.1.2.810';</div><div style="padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">{TODO -cFix : Removed ability to scan for text and images in PDFs files due to instability of PDF library}</div></span></div>]]>
   </description>
   <pubDate>Thu, 20 Aug 2009 18:02:37 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13134&amp;title=nigerian-spam-now-using-pdfs#13134</guid>
  </item> 
  <item>
   <title><![CDATA[Nigerian spam now using PDF&#039;s : Getting spam with a simple message...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13133&amp;title=nigerian-spam-now-using-pdfs#13133</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=102">WebGuyz</a><br /><strong>Subject:</strong> 6739<br /><strong>Posted:</strong> 20 August 2009 at 1:05pm<br /><br />Getting spam with a simple message in body &nbsp;like 'See the attached for more details' and there is a PDF attached with the same old Nigerian scams inside. Guess they caught up with technology. <DIV>&nbsp;</DIV><DIV>Any chance of reading the contents of PDF's for the same&nbsp;blacklisted keywords we've always used to fight this type of spam?</DIV><DIV>&nbsp;</DIV><DIV>Thanks!</DIV>]]>
   </description>
   <pubDate>Thu, 20 Aug 2009 13:05:09 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6739&amp;PID=13133&amp;title=nigerian-spam-now-using-pdfs#13133</guid>
  </item> 
 </channel>
</rss>