On 20/01/2026 05:20, Lothar Serra Mari via mailop wrote:
Hi all,
since a couple of days, I'm seeing an influx of spam mails sent via
Zendesk tickets.
The spammers open fraudulent tickets at companies using Zendesk and
either spoof the headers or enter random (e.g. mine and from a couple
of others I talked to) mail address as contact address.
I'm not exactly sure what you're seeing, as you didn't include headers,
but what we often see is:
- spammers add (probably accidentally) support desk email addresses, and
our email address, to a Google Groups list
- spammers send spam email to the Google Group, which sends the spam to
everyone, including the support desks
- support desks send automated ticket acknowledgements back to the
Google Group, which goes to everyone in that Google Group, including us
If that's what's happening to you, it's not really a problem with
ZenDesk (or the other support desks), but with Google Groups for
allowing unconfirmed email addresses to be added to Groups
We've started blocking all mail from Google Groups, unless they've been
explicitly whitelisted.
Paul
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
