?Mail Hijacker? Daily spam via "cp20.com" not being filtered...

Question

Level 1

53 points

?Mail Hijacker? Daily spam via "cp20.com" not being filtered...

I am receiving tons of spam from various aliases: "The Daily Conservative", "Survival Joe", "Prepare and Prosper", and the newest, "Tim Mathew -- RightWise". For a few weeks now, I've sent each and every message to spam and still, every day numerous times per day I keep receiving these emails into my INBOX. I finally discovered the common thread... the Reply To: address ends with "cp20.com" as in "reply_dwyqqa_dfqsyvvy@cp20.com", "reply_dwyoao_dhosijbc@cp20.com", or in the case of Survival Joe various links in the email with: "wde.dmsgs-esp-customer.com/t/96965/112..."

When I google cp20.com (I certainly don't go to it...) I see mention of an "email hijacker" referred to as trk.cp20.com and a half dozen or so websites offering to tell you how to get rid of it, but those websites also contain many ads with mac cleaner, and other junk that I know to be a red flag. I can't find any articles from sources I trust. I did run malwarebytes after seeing some mention in these Apple forums about how to deal with other known adware, but the scan didn't detect any issues.

Would really appreciate some wise advice...

(I'm up to date with MacOS Sierra 10.12.6)

Blessings! 🙂 MegH

B

MacBook Pro (Retina, 13-inch,Early 2015), macOS Sierra (10.12.6), Mail 10.3

Posted on Aug 17, 2017 12:09 PM

Reply

Answer 1

Aug 17, 2017 12:47 PM in response to MegHMom

Try creating a rule in Mail where: Any Recipient contains or ends with "cp20.com" and action to Move to Junk folder.

If you have any messages still in Mail, test the rule to see if it works.

Reply

Answer 2

MegHMom Author

Level 1

53 points

Aug 17, 2017 12:53 PM in response to Glenn Leblanc

Dearest Glenn,

Thank you SO MUCH!!! That got part of them, and then using your suggestion and carrying it a little further, I added a similar rule, scrolling down under "Any Recipient" to the "Edit header list" and added "Reply-To" and the followed your example with the rest, and that caught the remaining culprits!!!

Again, thank you so very much!!!

🙂 Meg H

Reply

Answer 3

Aug 17, 2017 1:00 PM in response to MegHMom

I knew the "Reply To" wasn't in the list, which is why I used Any Recipient. Glad to see you knew how to add it. It might be the only rule you needed since that is where the common criteria lies. Test it with just that one. You can also amend the action list to suit your needs when you are sure it works.

Remember that rules only apply to New & Unread messages. If you open a message first on another device, the rule won't get applied automatically on the device where the rule lies.

Reply