commit eea2b46: [Rules] Add more defs for LEAKED_PASSWORD_SPAM

Vsevolod Stakhov vsevolod at highsecure.ru
Mon Jan 21 14:42:03 UTC 2019


Author: Vsevolod Stakhov
Date: 2019-01-21 13:43:32 +0000
URL: https://github.com/rspamd/rspamd/commit/eea2b46b1d896f518cd2b51f6512d58806f737e0

[Rules] Add more defs for LEAKED_PASSWORD_SPAM

---
 rules/regexp/misc.lua | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/rules/regexp/misc.lua b/rules/regexp/misc.lua
index 56e63cd7b..aaf8425bd 100644
--- a/rules/regexp/misc.lua
+++ b/rules/regexp/misc.lua
@@ -61,14 +61,18 @@ reconf['HAS_ONION_URI'] = {
     group = 'experimental'
 }
 
+local my_victim = [[/(?:victim|prey)/{words}]]
+local your_webcam = [[/webcam/{words}]]
+local your_onan = [[/(?:mast[ur]{2}bati(?:on|ng)|onanism|solitary)/{words}]]
 local password_in_words = [[/^pass(?:(?:word)|(?:phrase))/i{words}]]
 local btc_wallet_address = [[/^[13][0-9a-zA-Z]{25,34}$/{words}]]
-local wallet_word = [[/^wallet$/i{words}]]
+local wallet_word = [[/^wallet$/{words}]]
 local broken_unicode = [[has_flag(bad_unicode)]]
 
 reconf['LEAKED_PASSWORD_SCAM'] = {
-  re = string.format('%s & (%s | %s | %s | lua:check_data_images)',
-      btc_wallet_address, password_in_words, wallet_word, broken_unicode),
+  re = string.format('%s & (%s | %s | %s | %s | %s | %s | lua:check_data_images)',
+      btc_wallet_address, password_in_words, wallet_word,
+      my_victim, your_webcam, your_onan, broken_unicode),
   description = 'Contains password word and BTC wallet address',
   functions = {
     check_data_images = function(task)


More information about the Commits mailing list