1. "Cheers, The Zephyrfalcon.org team"

    Some of my customers got those kind of mails. They're damn official looking too. If I wasn't the "crestsource.com" team myself, I'd probably have opened it.

    Also some are encrypting the .zip with a random password which they include in the mail. Presumably this is a cheap form of polymorphism, trying to stop them getting caught by filters so quickly.

    The arms race is certainly heating up!
      posted by Aaron Brady at 02:48:44 AM on March 17, 2004