{"id":1474,"date":"2015-02-22T22:40:16","date_gmt":"2015-02-22T22:40:16","guid":{"rendered":"http:\/\/pariswells.com\/blog\/?p=1474"},"modified":"2015-02-22T22:40:16","modified_gmt":"2015-02-22T22:40:16","slug":"spam-email-i-have-sent-you-the-account-report-please-download-and-view-the-attachment","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/spam-email-i-have-sent-you-the-account-report-please-download-and-view-the-attachment","title":{"rendered":"Spam Email : I have sent you the account report. Please download and view the attachment."},"content":{"rendered":"\r\n<p>Recently a spam message with the following body go through a Spam Filter. On checking it looks like the sender has been infected with a virus which then BCC&#8217;ed all their emails with the following body message and itself as an attachment ( to spread )<\/p>\r\n<p><strong>I have sent you the account report. Please download and view the attachment.<\/strong><\/p>\r\n<p>The message had an attachment of the following \u00a0:<\/p>\r\n<table width=\"550\">\r\n<tbody>\r\n<tr>\r\n<td>\r\n<p><strong>Attachment Notice<\/strong><br \/> <br \/> The following attachment was removed from the associated email message.<\/p><\/td>\r\n<\/tr>\r\n<tr>\r\n<td><\/td>\r\n<\/tr>\r\n<tr>\r\n<td>\r\n<table width=\"350\">\r\n<tbody>\r\n<tr>\r\n<td>\r\n<p>File Name<\/p><\/td>\r\n<\/tr>\r\n<tr>\r\n<td>\r\n<p><strong>account_report1902.zip<\/strong><\/p><\/td>\r\n<\/tr>\r\n<tr>\r\n<td>\r\n<p>File Size<\/p><\/td>\r\n<\/tr>\r\n<tr>\r\n<td>\r\n<p><strong>11219 Bytes<\/strong><\/p><\/td>\r\n<\/tr>\r\n<\/tbody><\/table>\r\n<\/td>\r\n<\/tr>\r\n<tr>\r\n<td><\/td>\r\n<\/tr>\r\n<tr>\r\n<td>\r\n<p>Attachment management policies limit the types of attachments that are allowed to pass through the email infrastructure.<br \/> <br \/> Attachments are monitored and audited for security reasons.<\/p><\/td>\r\n<\/tr>\r\n<\/tbody><\/table>\r\n<p>The above is actually Exchange&#8217;s Attachment Filter removing the Zip file ( virus ) luckily the sending server blocked the .zip from sending , but any good incoming filter should of been able to block this!<\/p>\r\n","protected":false},"excerpt":{"rendered":"<p>Recently a spam message with the following body go through a Spam Filter. On checking it looks like the sender has been infected with a virus which [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[914,913],"class_list":["post-1474","post","type-post","status-publish","format-standard","hentry","category-random","tag-attachment-management-policies-limit-the-types-of-attachments-that-are-allowed-to-pass-through-the-email-infrastructure","tag-the-following-attachment-was-removed-from-the-associated-email-message"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/1474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=1474"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/1474\/revisions"}],"predecessor-version":[{"id":1475,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/1474\/revisions\/1475"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=1474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=1474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=1474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}