1# SB-AFF.RC 2# 3# ADVANCE FEE FRAUD SCAMS 4# 5# Other Relevant Info: 6# 7# See the following URLs for the scoop on these slimeballs: 8# 9# http://www.secretservice.gov/alert419.shtml 10# http://home.rica.net/alphae/419coal/ 11# 12# Last updated: 10/14/2016 13 14LT4=no 15 16:0 17* LOCALTAG ?? ^no$ 18{ 19 LOCALDESCRIPTION='Pattern Match' 20 TESTNAME='Advance Fee Fraud' 21 TESTNAME3='Fraud Compensation' 22 TESTNAME4='Government Agency' 23 TESTNAME5='Loan Fraud' 24 TESTNAME6='Commercial' 25 TESTNAME7='Lotto' 26 TESTNAME8='419' 27 TESTTYPE=ALL 28 TESTLAST=20161014 29 TESTUPDATED=20161014 30 31 :0 32 * PMSCORE ?? ^LOW$ 33 { 34 TESTSCORE=5 35 TESTSCORE2=3 36 } 37 38 :0 39 * PMSCORE ?? ^MEDIUM$ 40 { 41 TESTSCORE=8 42 TESTSCORE2=5 43 } 44 45 :0 46 * PMSCORE ?? ^HIGH$ 47 { 48 TESTSCORE=10 49 TESTSCORE2=5 50 } 51 52 INCLUDERC=${SBDIR}/black/aff-patterns.rc 53 54 :0 55 * LT4 ?? ^yes$ 56 { 57 INCLUDERC=${SBDIR}/functions/rc-sub.rc 58 } 59} 60