Received random spam Calendar invitation

Has anyone contacted Apple support about this? Or spoken to anyone at a Genius bar? I haven't received anymore invites since the last one, otherwise I would be on the phone with them in a heartbeat.

Over the weekend I received the same Spam invitation on my WORK calendar with no way to delete it! $19.99 Ray-ban & Oakley Sunglasses On-line. Up to 80% off Sunglasses. Compare and Save. http:// ok- stores. com/ Invitation from: (there were chinese characters). I declined and this invite still appears daily on my iphone for the entire week. It accessed my "work" calendar which I never used. Someone mentioned changing our settings so that Calendar invites come to our Email 1st. This is a huge problem which Apple needs to address immediately. We cannot have random Spammers able to access our Calendars! That's just dangerous.

Today, November 15th, I also got a spam calendar invitation from: o4baet@imess123.club

$19.99 Ray-ban&Oakley Sunglasses Online.Up To 80% Off Sunglasses.Compare And Save. http://www.rbonlinestores.com/

Apple needs to solve this very unwanted problem. Spammers found a flaw in Apple's system.

I DO NOT want invitations from accounts who are not in my contact list.

I also got these spam invites. The quick and dirty way for me to get them off my phone was to go into Settings --> iCloud and switch off the toggle switch for Calendars. It then asked me if I wanted to delete the synced events from iCloud (or something; I can't remember the exact notification). I said yes, and it deleted the spam calendar invites off my iPhone calendar without me having to decline.

On my home computer, I had to disable iCloud in calendars.

It's not a perfect solution, but at least it removed the annoyance for now and I don't need to use iCloud anyways.

Apple, you really need to get your act together to prevent this kind of thing - especially measures to prevent spam. Also, don't automatically stick invites into my calendar when someone sends them (unless I accept), and allow me to delete invites without declining.

Create a new calendar, move the spam invite to that calendar and then delete the new calendar.

-Tim

I received the same RayBan spam in my calendar today too. I tried creating a new calendar, moving it and then deleting. It didn't work. All it did is copy the event to the new calendar. I ended up just turning off the calendar it was in and it disappeared. Not a fix but at least I won't by accident reply to it. My understanding is, if you answer the event, maybe/accept or decline, the sender then knows that there is a real person behind that email and you go onto a bunch of spam listings. APPLE FIX THIS PROBLEM!! We should be able to just decline without sending a message.

I received the same Calendar Spam. I solved my problem this way: Go to "Calendars" when you are in Calendar App on one of your devices (iPhone, iPad, etc. NOT your computer unless you go to your iCloud Account); See if you can experiment (Off-On) with the check-marks to the left of certain Calendars (if you have more than one); I found that one of my "Birthday Calendars" was the culprit in my situation; To the right of the Calendar that is the culprit, is an "i" with a circle around the "i"; Click it and at the bottom click "Delete Calendar; This deleted that "culprit Calendar" on all my devices and the "Sunglasses" spam was no longer seen.

Same problem.

I could not move the spam invitation to a new calendar while logged in at iCloud as suggested by other replies. The following did work for me, however.

1. login to your iCloud account in a web browser.

2. Create a new Calendar on the left (I labeled the new calendar "OnMac").

3. Click the spam invite to open its details.

4. Click the upper right colored shape in the details to select the "OnMac" calendar.

5. If the spam moves to the "OnMac" calendar (and stays there), then delete the "OnMac" calendar and you are done.

6. If the spam will not stay on the "OnMac" calendar (my situation), then open the event details on your Mac in the Calendar application.

7. Change the calendar for the spam invitation to "OnMac" in Calendar application on your Mac.

8. Refresh your web browser window with the calendar in iCloud. (Command-R refreshes without using cache).

9. Delete the "OnMac" calendar.

I forget if I deleted the "OnMac" calendar in the browser or in the Calendar application on my Mac.

10. You are done.

I started to receive the "UGG Official Pre Black Friday Sale 2016" calendar invite as well. I declined it, but Apple needs to take care of this as soon as possible or users are going to start getting flooded with this new spam tactic.

Your solution was helpfull for me.

Thanks

Friday, November 18, 2016 os 10.10.5 - Home calendar has the Ray-Ban invite as shown here:

This is obviously a major problem with iCal - and I am appalled. I have whited out the email addresses of the other parties that the "organizer" solicited - obviously a bot sending blocks of iCal accounts this commercial spam. I am pleased to see that the rest of the community has found this - I was concerned that my Apple ID was breached/broken/hacked - but, it is clear that's not the case. In any event I use https://www.grc.com/passwords.htm

to create my Apple ID password (high entropy garbage like this: erMvqZ3w9rkH3bW6fMWYScE15smAx ) - so, the iCal hack has not broken my password - if for no other reason than the number of others of us who are receiving these iCal Spam events. My list of other invitees has been edited to preclude the further harvesting of those email accounts.

What can Apple do? This one is simple. Look at the invitee address: usgt1ae@ibnnn.xyz

Dear Apple Tech: how about a little range-checking? It would be nice if the hack required something that parses as a valid email address!

Godawful complicated and ultimately works against future spam because you have created a non-default name for an iCal calendar. I'm an attorney (a patent agent has dockets, too) and I have had dozens of iCal calendars running at a time - typically one for each case in litigation. What the hack has done is to insert their ads by webdav to the default Home and Work calendar accounts. The best fix that I have is to eliminate the default names for iCal calendars - until Apple gets around to fixing the problem. The steps that you have work just fine, but for those people who don't work with iCal every day this page will help the average user https://support.apple.com/en-us/HT204598

It is the Apple backup and cleanup your iCal pages help page. Whoever has done this has a huge list of Apple email addresses - and I think that they may have limited the group to .icloud addresses. Here's my screenshot:

Fortunately - Home and Work are pretty well empty in my case. I edited out the other email addresses for the obvious reason - no other harvests. I am going to archive those two default accounts on every Apple id that I have and then delete them. I am amazed that the organizer need not have a valid email - that's just incredibly sloppy range checking - but, we will continue to see these unless we all switch to unique names for our calendars. The tyranny of the default strikes again!

For what its worth - here is a screen cap from my iPhone of the "organizer"

Anybody else have this one?

There appears to be multiple ways to get this spam…

Mail.app on OS X has an option to add invitations automatically to your calendar.

iCloud.com also has a similar setting.

See some of the other posts for more info…

Re: icloud calendar hacked?

Spam Calendar Invites<- has info on editing iCloud settings

I suspect you should all send feedback to Apple if you have not done so already they may respond faster if they have more reports from different users…

http://apple.com/feedback/

The invites are coming to the default named iCal calendars Home and Work. Create a uniquely named calendar and follow Apple's backup and cleanup advice here: https://support.apple.com/en-us/HT204598

These will continue to arrive as long as the defaults are in place.

grolaw wrote:

What can Apple do? This one is simple. Look at the invitee address: usgt1ae@ibnnn.xyz

Dear Apple Tech: how about a little range-checking? It would be nice if the hack required something that parses as a valid email address!

Actually '.xyz' is a valid top level domain, so that is potentially a valid address.

https://en.wikipedia.org/wiki/.xyz