+10Hey all,
Did anyone else get an email from JAMF with the above Subject?
This was in the body:
On March 14, an unknown source maliciously gained access to your primary e-mail address on JAMF Nation through a previously unknown and unintentional information disclosure on the website. ....
I ask cause me and anther guy at work got the same email at the same time.
Just wondering if anyone else getting this and if it's legit.
Thanks,
-p
Best answer by zach
Hi everybody-
The email that you received is a legit email from us.
One point of clarification on the email: People have been asking us the question about exactly what the individual gained access to. They found the "Primary Email Address" field from JAMF Nation. They did not gain access to your email or to your password.
We're fielding questions as they come in. Feel free to continue to email our primary contact for privacy (privacy@jamfsoftware.com), Wudi (wudi@jamfsoftware.com), or me at zach@jamfsoftware.com.
Zach Halmstad
Hey - I got the same too. The "mail" links aren't valid "mailto:" format and have a very strange URL linked. I scanned the URL in VirusTotal and got no hits but I really don't trust the email at the moment.
+26I got it as well. I also got random spam yesterday that I immediately discarded. Now I understand why I got it.
+9I have been getting a lot of spam and when I looked at who all got sent it I was wondering why most if not all the emails had edu or school emails, now I know got this email today.
+4Same here i received a email like this a few mins ago as well. I been getting bitcoin spam email to my company address for the past few days i wonder if its related.
+13Got one, as did my coworker. The URLs might point to Marketo, which could be a service JAMF is using for this kind of email blast (though I don't have many old emails from JAMF to check against, outside of service tickets).
Edit: Apparently I didn't delete the old 9.1/8.72 announcement; it has the same kind of links (mkto-p00...). MKTO is the stock symbol for Marketo.
+4i replied to the email and asked for a source address that they claim my account was hacked. I would like to share the information with my information security team just to make sure we aren't affected
+1If it's true, and it's coming from JAMF Nation via Marketo as the headers would seem to indicate, it'd be nice to know if passwords were also compromised, etc.
If not, more bits for the bit bucket.
+6I got it too. Email comes from Jason Wudi. Doesn't look too official though. The links are all randomised addresses.
https://jamfnation.jamfsoftware.com/viewProfile.html?userID=7
+7Hi everybody-
The email that you received is a legit email from us.
One point of clarification on the email: People have been asking us the question about exactly what the individual gained access to. They found the "Primary Email Address" field from JAMF Nation. They did not gain access to your email or to your password.
We're fielding questions as they come in. Feel free to continue to email our primary contact for privacy (privacy@jamfsoftware.com), Wudi (wudi@jamfsoftware.com), or me at zach@jamfsoftware.com.
Zach Halmstad
+7I've gotten the email as well. I checked out the links with another email that I got from a release point update email. It seems that they use that service, so this looks legit. Would love to see an official response on here though just to make sure.
Edit: I see that an official response came out as I posted this. :)
+14best practice - change your password anyway.
+36Gotta love 1Password...took 30 seconds to update my JAMF account with a long complex password across all my computers and devices. ;)
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
