spam from am.atlassian.com

Patrick_4ef2ww

Anyone else getting massive amounts of spam from accounts on am.atlassian.com in form of team invitations?

We're getting repeating sequences of identical invitations ("Your team is waiting for you to join them") within a couple of hours (up to ten per invitation). Targets are email adresses that are not registered with atlassian.

This should be suppressed by atlassian! Invitations should be one-offs and unrepeatable to prevent spam!

atlassian sender accounts are (for example):
noreply+d7761f353ae60b68d9d81f6b08db651cf181a844b39726a7c4008e54@am.atlassian.com
noreply+c221107451071e0ac05d5028e002a7b9a36d7fec3e84f815f6221d7c@am.atlassian.com

invite-links go to
https://id.atlassian.com/signup/invite?signature=.......

content are typically of type:
You've been invited to collaborate on Facebook (3) missed messages!I want sex. https://---DONTKLICK---cutt.ly/uLCD2CJ
You've been invited to collaborate on Facebook (6) missed messages Anna want sex. https://---DONTKLICK---bit.ly/3PGjCXi

 

Nic Brough -Adaptavist-

Welcome to the Atlassian Community!

I don't think these are actually coming from Atlassian systems.  It's a doddle to put a different "from" address on an email, so it, on the surface, looks like it's from a user at another domain.

I suspect someone has done that, and nicked the text from an Atlassian signup email to make it look a bit more genuine.

Best thing you can do is forward some of them to https://www.atlassian.com/trust/report-abuse - they will want all the headers and trace info, so please use a simple "forward" in your send, don't try to save the email and attach it.  Also, they're not really too bothered about explanations!  They know there's a problem with spam, they just need the raw data or the incoming email.