Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Over 20,000 spam emails arriving in my thunderbird inbox for last 3 hours

  • 11 uphendule
  • 1 inale nkinga
  • 26 views
  • Igcine ukuphendulwa ngu kls6136

more options

Over 20,000 spam emails arriving in my thunderbird inbox for last 3 hours. I called GoDaddy to ask them about the spam and we have gone into my webmail together and none of the spam emails are in webmail, so they say the problem has to be with Thunderbird. I am running Thunderbird 91.1.2 that was oddly installed today on 10/8/2021, but I don't believe I was ever asked to downloaded. Since the 3 hours of spam and now, I have shut down my computer once and so I am not sure if I was running version 91.1.2 before or after the shut down. I did get a webpage pop up when my computer restarted that said what is NEW in version 91. I am running Windows 7 OS, service pack 1. Please need help asap, as the spam emails keep coming more than 1 per second! Currently I have shut down the software, but I do need to reply to people. This is my work email and very important. I have used TB for about 10 years and never had this issue before. I have many email folders setup over the years. I would be very disappointed and saddened to need to uninstall and re-install everything, and might I lose my emails to redo everything? GoDaddy almost migrated my email from Linux I think to Office 365 about 10 hours before the spam emails started. It does seem slightly supicious that these 2 events are related, but go Daddy said they dod not think the issues were connected and just happen to be coincidental? Thanks so much

Ama-screenshot ananyekiwe

All Replies (11)

more options
I called GoDaddy to ask them about the spam and we have gone into my webmail together and none of the spam emails are in webmail, so they say the problem has to be with Thunderbird.

That doesn't really make sense. Assuming GoDaddy do have a spam filter running on their server, then it doesn't appear to work. They would have to catch the spam and put it into the Spam folder on their server before Thunderbird is fetching it from the server.

If your account is POP, you shouldn't see any of it at all in Thunderbird. If your account is IMAP you'd see all the spam messages in your Spam folder also in Thunderbird. But better there than in Inbox.

What you can do is to use Thunderbird Junk Mail Controls, which would catch those spam messages locally which slipped through the filters on the GoDaddy server. The flip side is, Thunderbird Junk Mail Controls only work effectively with some training. I.e. you'd have to manually mark spam messages "As Junk", and equally important, mark good messages as "Not Junk". https://support.mozilla.org/en-US/kb/thunderbird-and-junk-spam-messages

Please need help asap, as the spam emails keep coming more than 1 per second! Currently I have shut down the software, but I do need to reply to people.

The other possibility is that this is just backscatter. https://en.wikipedia.org/wiki/Backscatter_(email)

In other words, what you do see may just be misdirected bounces because a spammer was using your email address as From: email in a spam campaign. You'd then see lots of messages with a common subject, so you'd be able to create a filter and delete those messages easily.

I would be very disappointed and saddened to need to uninstall and re-install everything, and might I lose my emails to redo everything?

Re-installing the application would be a complete waste of time. Profile files are stored separately from the Thunderbird program files. The program files are static and do not change (except when you upgrade the Thunderbird application version). Because we store profile and program files separately, you can uninstall Thunderbird without losing your messages and settings, and if something goes wrong with a Thunderbird update your information will still be available. It also means that you don't have to reinstall Thunderbird in order to delete your information or troubleshoot a problem.

GoDaddy almost migrated my email from Linux I think to Office 365 about 10 hours before the spam emails started. It does seem slightly supicious that these 2 events are related, but go Daddy said they dod not think the issues were connected

That sounds like the most likely cause to me - see above. Of cause they don't want to take the blame.

Helpful?

more options

Is the affected account an IMAP account in Thunderbird?

Helpful?

more options

christ1 said

GoDaddy almost migrated my email from Linux I think to Office 365 about 10 hours before the spam emails started. It does seem slightly supicious that these 2 events are related, but go Daddy said they dod not think the issues were connected

That sounds like the most likely cause to me - see above. Of cause they don't want to take the blame.

Yap. Typical provider behaviour, they hardly ever acknowledge any blunder on their end.

Helpful?

more options

Thanks very much for your reply. I will make some comments below to try to narrow down the issue and solve this...

christ1 said

I called GoDaddy to ask them about the spam and we have gone into my webmail together and none of the spam emails are in webmail, so they say the problem has to be with Thunderbird.

That doesn't really make sense. Assuming GoDaddy do have a spam filter running on their server, then it doesn't appear to work. They would have to catch the spam and put it into the Spam folder on their server before Thunderbird is fetching it from the server.

If your account is POP, you shouldn't see any of it at all in Thunderbird. -I can check the emails 3 ways: 1. on TB on my computer (which is on pop.secureserver.net), which is where all of the spam is showing 2. on my phone on an Outlook app (which is on IMAP), I don't see any of those spam emails 3. on webmail thru email.godaddy.com (which is neither pop nor imap?), I don't see any of those spam emails

If your account is IMAP you'd see all the spam messages in your Spam folder also in Thunderbird. But better there than in Inbox.

What you can do is to use Thunderbird Junk Mail Controls, which would catch those spam messages locally which slipped through the filters on the GoDaddy server. The flip side is, Thunderbird Junk Mail Controls only work effectively with some training. I.e. you'd have to manually mark spam messages "As Junk", and equally important, mark good messages as "Not Junk". https://support.mozilla.org/en-US/kb/thunderbird-and-junk-spam-messages -All of the spam emails seem to be from completely unique email addresses like: From: Βӏսе Տky Inѕuranсe Տоⅼսtіonѕ <bounce@gohorseconnect.com> To: Νeԝ Ϲustoⅿеrѕ <scratchiness@bellied> From: Gо Reԁսce Ⅾebt <noresponse@animatione.com> To: Gо Reԁսce Ⅾebt <noresponse@animatione.com> From: Eхtraorԁinаrу Chrⅰs <mail@restresponse.com> To: New Ϲuѕtoⅿеrs <insight@probable> From: Cheap Credit Score <newsletter@adoptabin.net> To: Our Customer <undisclosed> From: AНЅ (Αԁᴠisor) <msg@smcoffers.com> To: Үοu <naziism@muenster> From: For Diаbеtіⅽs <email@kyanimalrelief.com> To: Nеԝ Cuѕtomеrѕ <seas@ecmascripts> From: Groоᴠe Loаn - Apрrovaӏ Ⅾepаrtmеnt <exchange@conuscoin.com> To: Frienԁ <widely@interferons> etc etc etc So that doesn't help to send them to junk. Also I just went into to TB briefly since a 6-7 hour break and the spams are still coming in like it seems more than 1 spam per second.

Please need help asap, as the spam emails keep coming more than 1 per second! Currently I have shut down the software, but I do need to reply to people.

The other possibility is that this is just backscatter. https://en.wikipedia.org/wiki/Backscatter_(email) -Idk maybe? "...This normally happens when a mail server is configured to relay a message to an after-queue processing step, for example, an antivirus scan or spam check, which then fails, and at the time the antivirus scan or spam check is done, the client already has disconnected. In those cases, it is normally not possible to reject the SMTP transaction, since a client would time out while waiting for the antivirus scan or spam check to finish. The best thing to do in this case, is to silently drop the message, rather than risk creating backscatter."

Measures to reduce the problem include avoiding the need for a bounce message by doing most rejections at the initial SMTP connection stage; and for other cases, sending bounce messages only to addresses which can be reliably judged not to have been forged, and in those cases the sender cannot be verified, thus ignoring the message (i.e., dropping it). "

In other words, what you do see may just be misdirected bounces because a spammer was using your email address as From: email in a spam campaign. You'd then see lots of messages with a common subject, so you'd be able to create a filter and delete those messages easily. - Can I create a filter when the emails seem completely unique?

I would be very disappointed and saddened to need to uninstall and re-install everything, and might I lose my emails to redo everything?

Re-installing the application would be a complete waste of time. Profile files are stored separately from the Thunderbird program files. The program files are static and do not change (except when you upgrade the Thunderbird application version). Because we store profile and program files separately, you can uninstall Thunderbird without losing your messages and settings, and if something goes wrong with a Thunderbird update your information will still be available. It also means that you don't have to reinstall Thunderbird in order to delete your information or troubleshoot a problem.

GoDaddy also migrated my email from Linux I think to Office 365 about 10 hours before the spam emails started. It does seem slightly suspicious that these 2 events are related, but go Daddy said they do not think the issues are connected

That sounds like the most likely cause to me - see above. Of course they don't want to take the blame.

Helpful?

more options

Did GoDaddy explain how it was possible that TB could be to blame? Because I'd be very interested to hear of any mechanism by which a mail client could be the source of Spam ( or anything else). A client literally just accesses the account(s) for you that you've set up in it. That's no different from a phone line or a TV set, or indeed a tap (faucet for Americans). It simply acts as a tap for the accounts you hold. You can no more blame TB for the flow of Spam than you could blame your water tap if your water supply is polluted. So, which account is the Spam coming to? If it's your GoDaddy email account then it's flowing though their servers until it reaches your TB inbox. I would set up a filter rule that only accepts mails that are in your address book. TB's rules aren't very sophisticated compared to full MS Outlook. But they can be shaped to do a decent enough job.

Helpful?

more options

I see your point TerryB but GoDaddy is saying that the spam is somehow from TB because none of the spam is in my GoDaddy webmail. How could the spam be showing up in TB but not in the webmail? Any ideas? I am just a novice here, but I would think that makes sense somehow that the spam should be appearing in my webmail? Thanks for everyone's comments so far and in future to anyone who can try to make sense of this? and help me to solve it.

Helpful?

more options

Nobody has any other solution or idea? Is there anyway to private message and send a phone number to chat about this maybe? Thank you

Helpful?

more options

We are volunteers, there is nobody you can call or chat with. I notice in the image that you have three or more email accounts. One seems to be POP, another IMAP, both possibly on GoDaddy, and a third from Gmail. It's also possible you get redirects from info@(your domain) or admin@ or help@. Did GoDaddy check ALL the email accounts that these messages might be coming from? Your site email addresses are not hidden so may attract spam, what you are seeing may also be accumulated spam that was blocked and undelivered, now suddenly released by a change at GoDaddy. Other than that thought - I can only confirm that Thunderbird as an email client simply accesses the emails that exist online, so that you can view and use them on a local computer. It does not spontaneously create and import email. So, is it possible one of your site email accounts (possibly a hidden one) has been linked to your own somehow? That could be at GoDaddy if they are redirecting to your address from another email@klsgeo account - or even from an account that's nothing to do with you. Just a thought.

Helpful?

more options

Have you examined those spam emails? Do any of them say the email address they're sent to? Have you looked at the headers; the delivered to line for example. There's no point looking at who they're from. But seeing who they're sent to will tell you which account is compromised. Alternatively you need to switch all your accounts off, then check them one at a time. See which one(s) are receiving the spam. But, as we've said, TB is only a conduit for mail. It can admit the spam, if it's aimed at one of your accounts, it can not generate it.

Helpful?

more options

Thank you AgnesRM and TerryB. TerryB, all of the spam seemed to be like this, as mentioned above: "-All of the spam emails seem to be from completely unique email addresses like: From: Βӏսе Տky Inѕuranсe Տоⅼսtіonѕ <bounce@gohorseconnect.com> To: Νeԝ Ϲustoⅿеrѕ <scratchiness@bellied> From: Gо Reԁսce Ⅾebt <noresponse@animatione.com> To: Gо Reԁսce Ⅾebt <noresponse@animatione.com> From: Eхtraorԁinаrу Chrⅰs <mail@restresponse.com> To: New Ϲuѕtoⅿеrs <insight@probable> From: Cheap Credit Score <newsletter@adoptabin.net> To: Our Customer <undisclosed> From: AНЅ (Αԁᴠisor) <msg@smcoffers.com> To: Үοu <naziism@muenster> From: For Diаbеtіⅽs <email@kyanimalrelief.com> To: Nеԝ Cuѕtomеrѕ <seas@ecmascripts> From: Groоᴠe Loаn - Apрrovaӏ Ⅾepаrtmеnt <exchange@conuscoin.com> To: Frienԁ <widely@interferons> etc etc etc" AgnesRM, yes maybe that might make sense that with the migration to Office365, that this is a dump of previously "accumulated spam that was blocked and undelivered, now suddenly released by a change at GoDaddy." I will contact them again. I am also not seeing any of my nonspam emails since at least since 10/9/21 at 9:19Pm my time and then only 4 spam emails since then, but the inbox counter is adding more than 1 a second still and so that must be spam spewing in. And I am getting a message saying: "Connection to server pop.secureserver.net timed out". don't if that helps to figure out anything further?

Helpful?

more options

It looks to have all been solved. I do have 35,000+ emails listed in my inbox counter, but I only ever got probably 200 spam emails that made it into my inbox. And now all of my webmail emails (non-spam) seem to have appeared in my inbox and no more spam. I think it was the GoDaddy migration and that this was a dump of previously accumulated spam that was blocked and undelivered, now suddenly released by a change at GoDaddy. Thanks for the help. Regards.

Helpful?

Buza umbuzo

Kufanele ulogele ukungena ku-akhawunti yakho ukuze uphendule amaphosti. Uyacelwauqale umbuzo omusha, uma ungekabi nayo i-akhawunti namanje.