I'm getting malware sent to me as .zip attachments that are zipped up exe files. I want to setup message filters to catch them but I can't seem to find a way to do that. I tried setting up a customize header but the value I was looking for was apparently in the attachment and not in the header. If I view source of the email there is the line Content-Type: application/zip; But it seems to be the actual attachment and body contains doesn't pick it up.
Anyone know if this is possible?