Massive Lockergnome Spam Look-a-Like Campaign! Lockergnome “Spam” Joe Job Implicates Apple’s Mail Servers!

no spam stop spam

 

The Internet Patrol has received several examples of spam which has been sent out under the Lockergnome name, and through Apple’s mail servers.

The spam includes fake confirmation requests to join various Lockergnome newsletter mailing lists, In addition, other pieces of the spam campaign include actual Lockergnome newsletters, despite not having confirmed (or even requested) to receive them.

The copies of the spam Lockergnome newsetters we saw were addressed to “s.jobs@apple.com”.


The fake spam Lockergnome confirmations look like this, and also spoof Lockergnome’s real email service provider, WhatCounts:


From: confirmations@whatcounts.com
Subject: Your confirmation is needed (ok i160929001150989078925)
Date: June 22, 2006 8:11:35 AM PDT
To: [elided]

Your email address ‘elided@deleted.com’ has been submitted to be
subscribed to the ‘Media Center’ mailing list. The list creator
has asked that all new sign-up requests be confirmed.

No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free?
Click for amount options
Other Amount:
What info did you find here today?:
Get notified of new Internet Patrol articles for free!

To confirm that you want to join this list, simply reply
to this message leaving both the subject and message body intact. It’s important that
the words ‘ok i160929001150989078925’ appear in either the subject or
body of your message (it’s fine if they appear in both places).

Also, make sure that your message is sent to ‘elided@whatcounts.com’. If you
simply press your email client’s ‘reply’ button this should happen automatically.

Alternatively, you can simply click on this link to confirm your
request: [link redacted]

 

The IP addresses through which this spam is being relayed include 17.254.13.9, 17.128.113.37, and 17.254.13.22, all of which are Apple mail server machines. (They are mail-in6.apple.com,, relay7.apple.com, and mail-out3.apple.com, respectively.)

No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free?
Click for amount options
Other Amount:
What info did you find here today?:

One thought on “Massive Lockergnome Spam Look-a-Like Campaign! Lockergnome “Spam” Joe Job Implicates Apple’s Mail Servers!

  1. I had a problem looking for a Lockergnome download last night, I kept getting redirected to somewhere other than the download site. I wonder if that was related. I guess I could dredge up the Lockergnome post and examine it more closely.

Leave a Reply

Your email address will not be published. Required fields are marked *