Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Received random spam Calendar invitation

Hello,


Today I suddenly received a spam Calendar invitation from an icloud.com account. The content of this invitation is for $19.99 ray ban sunglasses (clearly spam) and it has other visible email accounts within the invitation. I'm wondering if i should be worried about this? Has any of my accounts been compromised for this to happen? Do they have access to my iCloud account to be able to do this or is it as simple as they have my email and sent out an invitation like a spam email?


I would like some advice about this, what should I do etc. I tried to search this problem but couldn't really find anything.


Thanks

iPhone 4S

Posted on Oct 22, 2016 5:48 AM

Reply
Question marked as Best reply

Posted on Nov 5, 2016 7:30 AM

Apple needs to put a "delete without reply" option back in on phone.


The work-around that worked for me is to move the invite to a new empty calendar on the icloud website, then delete that calendar.


I DON'T EVEN HAVE ICLOUD CALENDARS TURNED ON BUT THE ALERT WOULDN'T GO AWAY FIX YOUR JUNK APPLE

74 replies

Nov 29, 2016 10:09 AM in response to Dorut

If you have anything within warranty or under AppleCare contact the service and report this as an iOS / OSX bug in iCal.


I have an open ticket now. If many of us make the report the problem will be escalated.


That The NY Times has an article (and, few comments) about iCal SPAM may nudge the company a bit more.


I've founds posts about this spam issue going back at least three years.

Nov 29, 2016 12:13 PM in response to gungnij

The worst case scenario is pretty clear:


The hack that permits iCal notices that cannot be blocked is easily converted to an attack.


Consider how useful your OSX / iOS device will be if you start receiving notices at the rate of one per second. If the hack permits access to old, random-named, calendars will it be that hard to simply define a shared calendar and notify you from that calendar?


Weaponizing this hack is a certainty - the only question is when.


I've looked at iCal in Activity Monitor and it is deeply tied to OSX - and, given the lesser controls under iOS - iCal must be even more engaged in that OS.


Short of turning off Internet access, there is no defense.


Make service requests for a bug in iCal.

Nov 29, 2016 5:14 PM in response to horsedreamer

The hack that permits iCal notices that cannot be blocked is easily converted to an attack.


Consider how useful your OSX / iOS device will be if you start receiving notices at the rate of one, or one thousand, per second. If the hack permits access to old, random-named, calendars - as it did this past weekend with a special 2010 calendar of mine only used for a few months in one of my cases back then (screen capture below) how hard will it be for the hacker(s) to define a shared calendar using your ID and notify you from that calendar? I think that's what's happened to you where you don't have iCloud calendars enabled.


Weaponizing this hack is a certainty - the only question is when will it happen?


I've looked at iCal in Activity Monitor and it is deeply tied to OSX - and, given the lesser controls under iOS - iCal must have even deeper hooks in that OS.


Short of turning off all Internet access, there is no defense.


The only way that I know of to do anything constructive is by making Apple service requests about the bug in iCal by contacting support: https://support.apple.com/contact.


I've seen reports of this bug dating back several years. What I haven't seen in those years is the number of these SPAM reports that we are seeing today. When the New York Times publishes the iCal and Photo sharing bug in addition to 9 to 5 Mac and other Mac sites, this problem is growing.


The "fix" in iCloud to turn off in-app notifications had no effect on this last Notification - an Ugg phishing notification. Screen capture follows: note - not all email addresses are iCloud and neither are they limited to US email accounts. User uploaded file

Received random spam Calendar invitation

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.