Mautic is currently the target of a large email spam campaign designed to undermine its reputation. A number of individuals, particularly Yahoo Mail users, have reported receiving large volumes of emails that closely resemble our official communications – but which originate from suspicious, unauthorized domains.
These emails are not sent by Mautic, nor by any service officially affiliated with us. They imitate our templates, use Mautic’s name as the sender, and spoof our reply-to address to appear legitimate, with the clear intent of misleading recipients.
We’re actively investigating the situation and working with relevant parties to shut down the sources of these emails. In the meantime, we’re asking for your help.
What you can do to help
If you’ve received these emails, there are a couple of ways you can help stop the attack and reduce further impact:
1. Report the Malicious Domains
Filing a report with GoDaddy (the domain registrar) and Akamai (where the emails are being sent) can help disable the domains sending these fake emails. Here’s how:
- Visit the GoDaddy abuse report form and Akamai’s abuse report form
- Under “Type of Abuse”, choose Spam as a delivery service for GoDaddy and Other Acceptable Use Policy Violation for Akamai
- List the domains:
- pubmeets[.]com
- mediatechold[.]shop
- When asked if a brand is being impersonated, select Yes and enter Mautic.
- Use the additional information field to explain the issue (e.g., “These domains are sending spoofed emails pretending to be from Mautic, targeting Yahoo users who are not subscribed to Mautic’s communications.“).
2. Block the Emails in Yahoo Mail
If you’re using Yahoo Mail, you can block these messages to prevent them from reaching your inbox:
We truly appreciate your help in reporting and blocking these harmful messages. We’re doing everything we can to put an end to this spam campaign and will continue to share updates through our official channels.
