Massive Lockergnome Spam Look-a-Like Campaign! Lockergnome “Spam” Joe Job Implicates Apple’s Mail Servers!

spam email blocker
Share the knowledge

The Internet Patrol has received several examples of spam which has been sent out under the Lockergnome name, and through Apple’s mail servers.

The spam includes fake confirmation requests to join various Lockergnome newsletter mailing lists, In addition, other pieces of the spam campaign include actual Lockergnome newsletters, despite not having confirmed (or even requested) to receive them.

The copies of the spam Lockergnome newsetters we saw were addressed to “s.jobs@apple.com”.

The fake spam Lockergnome confirmations look like this, and also spoof Lockergnome’s real email service provider, WhatCounts:


From: confirmations@whatcounts.com
Subject: Your confirmation is needed (ok i160929001150989078925)
Date: June 22, 2006 8:11:35 AM PDT
To: [elided]

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

Your email address ‘elided@deleted.com’ has been submitted to be
subscribed to the ‘Media Center’ mailing list. The list creator
has asked that all new sign-up requests be confirmed.

To confirm that you want to join this list, simply reply
to this message leaving both the subject and message body intact. It’s important that
the words ‘ok i160929001150989078925’ appear in either the subject or
body of your message (it’s fine if they appear in both places).

Also, make sure that your message is sent to ‘elided@whatcounts.com’. If you
simply press your email client’s ‘reply’ button this should happen automatically.

Alternatively, you can simply click on this link to confirm your
request: [link redacted]

The IP addresses through which this spam is being relayed include 17.254.13.9, 17.128.113.37, and 17.254.13.22, all of which are Apple mail server machines. (They are mail-in6.apple.com,, relay7.apple.com, and mail-out3.apple.com, respectively.)

Get New Internet Patrol Articles by Email!

The Internet Patrol is completely free, and reader-supported. Your tips via CashApp, Venmo, or Paypal are appreciated! Receipts will come from ISIPP.

CashApp us Square Cash app link

Venmo us Venmo link

Paypal us Paypal link

 


Share the knowledge

One thought on “Massive Lockergnome Spam Look-a-Like Campaign! Lockergnome “Spam” Joe Job Implicates Apple’s Mail Servers!

  1. I had a problem looking for a Lockergnome download last night, I kept getting redirected to somewhere other than the download site. I wonder if that was related. I guess I could dredge up the Lockergnome post and examine it more closely.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.