My Apple email being used to send spam

Question

Level 1

30 points

My Apple email being used to send spam

This is the first time (that I'm aware of) that my Apple email address was used to send out bulk spam. I don't believe the account was hacked, since I am still able to sign into iCloud and access my email. I'm assuming that my address is being spoofed. I contacted those people who I thought had received spam from me.

Is there any way to stop this? I'm worried that it will continue until everyone I've contacted or emailed is going to get spammed by me. This is an address that I use for basically everything.

Are there steps I can take to keep my email address from being used this way?

Thanks.

iPhone 5, iOS 7.0.4, Verizon

Posted on Jun 21, 2016 9:47 AM

Reply

Answer 1

BBoiss

Level 4

1,433 points

Jun 21, 2016 11:37 AM in response to Carla67

Carla67 wrote:

This is the first time (that I'm aware of) that my Apple email address was used to send out bulk spam. I don't believe the account was hacked, since I am still able to sign into iCloud and access my email. I'm assuming that my address is being spoofed. I contacted those people who I thought had received spam from me.

Is there any way to stop this? I'm worried that it will continue until everyone I've contacted or emailed is going to get spammed by me. This is an address that I use for basically everything.

Are there steps I can take to keep my email address from being used this way?

Thanks.

Since your password had not been altered to gain access, the password may have been learned somehow through keylogging or phishing. It would still be a good idea to update your password and security information. http://www.apple.com/legal/more-resources/phishing/

Two-Factor Authentication may be something to look into as well so you can be made aware of any logins on your account. Two-factor authentication for Apple ID - Apple Support. Do this before changing any other security setup on your account like your password should you choose to move forward with it. Otherwise, you will need to wait 72 hours after updating your password, etc for security measures.

Lastly, Contact Apple for support and service - Apple Support should you feel the need for any further reassurance.

Reply

Answer 2

Carla67 Author

Level 1

30 points

Jun 21, 2016 11:44 AM in response to BBoiss

I can still access my account, and I have two-factor authentication for my Apple ID. If there had been a login, I would have known about it.

From what I can tell, they are using my address and routing the spam through other domains. I believe I've identified two of those domains. I seem to be getting the bounce-back (undeliverable) emails in batches, and each time from a different domain.

Since I know they have not logged into my account, and there is no virus or malware running (just did a scan), how do I stop my email address from being used? I'm trying to warn my friends and family, but it is not likely I can warn everyone. I'm trying to contact those people who I can identify in the email headers as possible recipients of the spam, but have not heard back from anyone, so I don't know if these spam emails are reaching their targets or not.

Reply

Answer 3

BBoiss

Level 4

1,433 points

Jun 21, 2016 5:44 PM in response to Carla67

Love that you are up to speed on all of this! The next step would be to inform Apple directly about this. Believe me, if someone is falsely routing spam through your address, they will want to know about it. Contact Apple for support and service - Apple Support

I've seen where the iCloud Engineers have even asked that the account be placed into troubleshooting mode so they can further investigate something like this. It's rare that they ever have to get involved.

Reply