[PR #3416] modified rule: Spam: Mastercard promotional content with image-based body

Author: github-actions[bot]

detection-rules/3416_spam_mastercard_promo.yml

@@ -4,6 +4,8 @@ type: "rule"
 severity: "low"
 source: |
   type.inbound
+  and length(attachments) == 0
+  and not subject.is_forward
   and any(ml.nlu_classifier(beta.ocr(file.message_screenshot()).text).topics,
           .name == "Financial Communications"
   )
@@ -50,4 +52,4 @@ detection_methods:
 id: "e5402e0a-54d4-58da-89d4-13862a5c29dc"
 og_id: "5f2cb559-0db6-5aa0-b8ee-496d688eafa0"
 testing_pr: 3416
-testing_sha: f3bf3bc5e2773630150b9b3bac56e8b2e74335d5
+testing_sha: 32cbdb03573c78ba826aa0ff64d58b5535ac81fc