4 ms·
Getting tens of thousands of verified emails from CNN over the last few hours
Over the last 6 hours I've been constantly getting spammed with emails from cnn@transactional.cnn.com (and iCloud marks those as "Digitally Signed" / "Verified") about "Resetting my Password" and "Veriyfing my registration email". They seem to be coming every 30s or so.
I've since set up a rule to automatically move such emails to my trash. I've never made an account on CNN, I'm from Europe so I can't even do that.
Anyone have any idea what's going on?
- LinuxBender 4y agoAnyone have any idea what's going on? Perhaps a broken spam bot. Your current methodology is probably sufficient but if you want a breakdown of the sending servers just view the email headers. I assume iCloud probably has a tool to decode their in-house added smtp headers but I do not have a link to it. MXToolBox [1] has a generic decoder. [1] - https://mxtoolbox.com/EmailHeaders.aspx https://mxtoolbox.com/EmailHeaders.aspx
- fr3fou 4y agoRan the headers through the tool and got these results: (I've redacted my email for obvious reasons) https://mxtoolbox.com/Public/Tools/EmailHeaders.aspx?huid=cefefb13-46a3-439c-aa34-228d5e2fe2fb https://mxtoolbox.com/Public/Tools/EmailHeaders.aspx?huid=ce...
- LinuxBender 4y agoEven passes SPF. Could be someone found a way to game a web interface on CNN's site. You could always forward the email as an attachment to CNN and give them the link to mxtoolbox and tell them how many of those emails you have received. [1] [1] - https://help.cnn.com/us/Feedback https://help.cnn.com/us/Feedback whois cnn.com|grep -i abuse Registrar Abuse Contact Email: domainabuse@cscglobal.com Registrar Abuse Contact Phone: 8887802723
- fr3fou 4y agoSent an email to them. The emails still haven't stopped. Will keep this thread updated
- fr3fou 4y agoSeems like I haven't been receiving any emails other than the spam ones for the last couple of hours
- fr3fou 4y agoLogged in my iCloud account from another device and got an email from Apple for that immediately, however emails from other senders don't seem be received at all
- LinuxBender 4y agoThere is not much more I can add. I think your best bet at this point would be to open a case/ticket with Apple and show them what you saw from CNN. Best case would be if you managed to get Apple and CNN to work it out. Best of luck!
- fr3fou 4y ago8 hours later, 18 hours total, it still hasn't stopped. I've since received some other non-spam emails, but not everything has been delivered to me (I performed some tests w/ other emails)
- ericrallen 4y agoWorth considering that sometimes when someone is trying to take over[0] some of your accounts they will employ tactics like this to bury the signal in noise. [0]: https://www.howtogeek.com/412316/how-email-bombing-uses-spam-to-hide-an-attack/ https://www.howtogeek.com/412316/how-email-bombing-uses-spam...