Received a Spam invitation from Atlassian account scamming users

[Steve]

Hello, 

I hope you’re doing well. I received an invitation that I thought was real and got added to a bitcoin spam/scam project in Atlassian. I believe these users are abusing Atlassian accounts. I immediately changed all my information (name, e-mail, password) and deleted my account. I created this one so that I can reach you here. 

I already emailed abuse@atlassian.com but nothing has happened yet. I’m afraid these users now have access to my information (like my password) but hopefully I caught it in time and I’m okay.

I am attaching a screenshot of what the email looked like, as well as the email address that sent me the spam invitation:

 noreply+f1175fbf362c5a0a842066bc287036555ef9b34e1a03fbc83434d541@am.atlassian.com

Thank you! Please help me as soon as you can. I’ve been very anxious about this!

Kindly,

S

[Nic Brough -Adaptavist- · Accepted solution]

Welcome to the Atlassian Community!

No, the abusers only have your email address.  If you don't engage with them in any way, then that's all they will ever have.

You didn't need to delete the account or change any details (although I would always recommend a password change if you ever have any doubts, or have not changed it for a few weeks).

It's a bit overkill to delete the account, but not a bad thing if you're not really using it, and it makes you feel safer.  You've done absolutely the right thing in forwarding the email to the abuse team.  They don't always respond, in my experience, but they will take down any site that is abusive like this, when they can (they're quite busy - abuse is not their only role)

[Steve]

Thank you so much for reassuring me that that’s all they have (email.) I also called Atlassian and spoke to a very kind rep that reassured me similarly. 

I was not an Atlassian user before (didnt even know what atlassian was!) and foolishly created the account because I had created a helpdesk ticket with another company and thought that it was my invite to see the progress. I feel so dumb!

Yeah, I’m going to keep it deleted because it makes me feel safer. And I’m glad that I reported it to the proper email. I won’t expect a reply, but they have the emails now so I’ll just hope that they close the accounts of those abusers ASAP.

Best,

S

[Ran Rubinstein]

How is this still happening and no one at atlassian cares

[Shide]

How can I leave a Spam project? I don't want to have the project forever. Please let users remove from projects.

[Nic Brough -Adaptavist-]

You can not just remove yourself from projects, that would be a logistical and legal nightmare for a lot of organisations (a lot more than you think)

If the project/system is legitimate, then you need to ask the admins to remove you.  In most cases, you'll find you were added by mistake, or a re-organisation (you moving jobs, their project re-jigging, whatever) didn't get it all right.

If it is a malicious system you should not have been "added" to, then get any email it has sent to you and forward it, unchanged and in full, to abuse@atlassian.com .  There is no need to add any explanation or information, literally just click "forward" in your email client and send it.

[Deleted user]

I've also been added to someone else's site and was tagged in some random task.

I had to verify this by separately creating an Atlassian account with the email used

. Apparently, if you add a dot in the middle of your username, ie. john.doe@gmail.com, you'll receive the emails at johndoe@gmail.com.

I've forwarded those emails to abuse@atlassian.com and deleted the Jira account. Hopefully, the site can be taken down. 

[Deleted user]

Truth is Atlassian don't give a damn, they are perfectly happy to allow abuse and scams on their platform.

You can email abuse@atlassian.com until your face turns blue, they will do nothing.

[Shide]

I'm resending all the emails that I receive to abuse@atlassian.com. I hope they do something with those... I think I've resend around 10-20 since en of August...

[EANNA ESHI DE GUZMAN]

Same there's someone I chat in telegram that I thought legit she offer me £40 per page total of £6200 once done.

[Steve]

I had some issues attaching the screenshot but it is finally attached!