The new wave of spam with PDF in attachment started flooding the inboxes. To get past spam filters, the actual text within the body of the spam e-mail is empty or contains nonsensical phrases. AntispamSniper plugins have enough features for blocking this new kind of spam:

• To get rid of PDF spam add the mask "pdf" to the black list of attachment types (Filtering | Attachments | File types). Only whitelisted senders will be able to send to you PDF documents in attachment. The messages from unknown senders with PDF in attachment will be blocked.
  
  
  
• Since version 2.6.0.1 the plugins allow using rules for filtering messages by attachment headers. Here are the examples of black rules for blocking PDF spam:
  
  This rule blocks all messages with attached PDF.
  
  

  Header{Content-Type} =~ \.pdf

  
  This rule with two conditions blocks the messages with PDF document in attachment and empty body (two cases are recognized: when a message contains no text/html part or its body contains only spaces).
  
  

  Header{Content-Type} =~ \.pdf
  Body =~ ^\s*$

  
  Use this rule to block the messages without the "keyword" string in subject and with attached PDF.
  
  

  Header{Content-Type} =~ \.pdf
  Not Header{Subject} =~ keyword

  
  See more information on using the rules.
  
  
  
• The plug-in automatically calculates the checksums for message attachments. Once it was trained on a message with attached PDF, the plug-in blocks new messages with the same document in attachment automatically.