Spam Calendar Invites

Thanks. That helped with my problem.

Hi ,

Open calendar its preferences & click on account > delegation but my screen shot says > this server doesn't supports .

I am taking an example for google Cal Dav

Clicked on Google Cal Dav > delegation the permissions are set to read only , in your case verify it is read and write thats why spammer has permission to read & write and he is writing & sending spam calendar invitations .

click on edit in the above screen shot , a window appears , if any thing is found select it and click on minus sign .

The right permission is read only .

Click on done .

Hello, Andrew.

I woke up yesterday and found one of those spams in my Calendar. Unfortunately, I was naive enough to hit "Decline" and.. guess what?.. yes.. Photos invites have just begun today. Since I do not share or sign into other people Albuns, the invitations aren't coming straight to my devices, but instead to my non-iCloud email.

For one side, if that keeps the annoyance in one contained place and off my calendar.... Well.. Anyway, this whole mess should activate the alarms at Apple HQ and make them give the users the option to receive invitations only from known people that are already in their Contacts OR at least a way to report the spam, just like it is with iCloud email and even iMessages.

I know Apple does not monitor these forums, and I've send them a Feedback message about the issue. But I think I'll just send them an update. Others sites like Tom's Guide, and even some Brazilian iPhone blogs, are already warning users about this spam thing. I only wish I had read about it before.. oh well.

Hi, everyone,

One thing I just noticed: at the end of the email with the invitation to sign the stream of the Chinese spammer, there's an option at the bottom of the e-mail to "not receive any more photo sharing invitations" (sorry, I could not find an exact translation, since I receive my emails from Apple in Portuguese). Clicking it leads me to an iCloud hosted site (it's legit, with Apple signed certificate and all) and, after doing its thing, the page tells the following (again, a free translation from Portuguese): "You chose not to receive any more invitations. You'll no longer receive e-mail invitations from Photo Sharing at the e-mail %{EmailId}." Assuming the spammer is using only one e-mail (which I highly doubt), should it display its address or, at least, my address, instead of that %{EmailId}. string?

Thank you all.

I started getting spam invitations this past weekend to join an iCloud shared photo album. Today those invites have started coming through to my icloud calendar.

Has anyone tried changing the email address associated with your AppleID to stop the spam invitations? Is there any reason why I would not want to do this?

I have temporarily turned off the in-app calendar invites as suggested by another post, but that is only a short-term solution for me.

This is my concern also. Why is this not patched yet? This is an obvious route in and I'm sure I wasn't the only person to first decline one such event before learning what a stupid mistake that was. Why on earth would I want random invites from unknown senders anyway?? Just give us the option to limit it to known contacts, or at least a way to mark an event spam without notifying the sender so that Apple can ban them.

Apple needs to fix this, if deleted it still notifies spammer that it is a legitimate account.

I am starting to receive spam calendar invitations. This is a complete joke, I cannot believe that Apple have allowed this flaw in their security.

This is an absolute joke, Apple what are you doing about this?

What an idiotic response.

I just got this exact same message. I was about to delete it, but it said it would notify the sender, so I stopped. I read online that you can move it to a "junk" calendar and delete the entire "junk" calendar. I tested that with my wife, but she did get a declined notice when I deleted the "junk" calendar entry. I'm stuck with the calendar entry at this point. Not sure how to proceed to remove it.

Posted in another thread about this and am posting here too because I am positively fuming.

What an unbelievably stupid loophole/exploit to exist. I received one on my calendar and apparently stupidly declined it since that seemed like a logical thing to do, not realizing this idiotic loophole existed that would then make me a further target to more spam. I've received more in my calendar and have done the workaround to add it to a new calendar and delete that calendar, but am now receiving them in the Reminders app and see no way remove it without declining.

Completely unacceptable that this is happening, and there's not even a simple option on the user side to block incoming invites outright. Unbelievable.

Hi all I found this option under Calendars in the settings. I suspect the invites are coming in from either the locations we've been to or the apps we've downloaded so I'm switching these off for now!

Thanks for your input. I am yet to find a solution so for now this calendar invite is pending. I have two factor authentication on, so I'm not too worried. I'm just wondering if they have got hold of my iCloud email address somehow through a website leak elsewhere. Even so, Apple should have a solution to prevent this.