Re: message snuck past Message Labs

Get yourself a Barracuda, Rob.



Steve Pitcher
Enterprise Systems Manager

Phone: 902-895-8430 x3104
Fax: 902-893-1136
Email: stevepitcher@xxxxxxxxxxxxx
Website: www.scotsburn.com

Scotsburn Ice Cream Co. 85 Blakeney Drive Truro, N.S. B2N 6W9 Canada



From: Rob Berendt <rob@xxxxxxxxx>
To: domino400@xxxxxxxxxxxx
Date: 2016/08/23 12:23 PM
Subject: message snuck past Message Labs
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxx>



<snip>
Partially Missed Malware Run

Date posted: 23 Aug 2016 12:50 PM Last updated: 23 Aug 2016 12:50 PM
Please be advised that a small subset of customers may have received a
malicious mail with the following attachment in the mails. It was first
observed at around 10:17 UTC.

Sender: voicemail@xxxxxxxxxxxxxxxxxxx
(The domain changes to who it is being sent to)

Subject: [Vigor2820 Series] New voice mail message from 01491435995 on
2016/08/23 16:21:15
(the phone number and time changes in the subject)

File Attached: Message_from_01491435995.wav.zip

Please advise any user that may have received this mail to delete it
immediately. Our malware and spam team has worked vigorously and have
implemented quick Anti-Spam and Anti-Virus detection while additional
detection is still being worked on.

Our teams will continue to monitor this situation very closely, and we do

apologize for any inconvenience caused.
</snip>

We've turned off Trend Micro's Scan Mail for Lotus Domino awhile back
since their updates and ability to support any version written this
century were lacking.

Rob Berendt