System Admins

 View Only
  • 1.  Has anyone been spammed form this address posing as Cvent?

    Posted 20 days ago

    Hi,

    One of our event users is getting spammed from this email address: cvent-planner.com. It uses content from their events and the subject line, but then adds an odd message like this:

    .....copy of message text .......

    The following message was sent by [random fake email address here] regarding the Investing in a Time of Energy Transition and Regulatory Changes event. You can reply directly to this message to contact the individual.

    good

    ........ end message text ........

    I checked whois and this is not Cvent. But they get a dozen emails a day. Wondered:

    1. If anyone else is getting emails like this.
    2. Cvent - they are impersonating a domain close to yours and representing the email as coming from you.

    The user will block this from their email system.



    ------------------------------
    Joseph Mello
    Sr. Society Operations Technical Specialist
    CFA InstituteUnited States
    ------------------------------


  • 2.  RE: Has anyone been spammed form this address posing as Cvent?

    Posted 20 days ago

    Does your event display the registration list page on your registration site before or after registration? Is your event a public registration site that anyone can find via a search engine? 

    I personally have only had to deal with a similar situation but relating to hotel blocks for the event not from Cvent. In the past, we would send out a notification to all invitees and registrants informing them of spam messaging and highlighted what they should look out for as a valid email from the event. 

    On another note, I would recommend that you report the email address and domain to be blacklisted. Once this happens, it is very hard to get off the list. It is not fool proof as with email spoofing, and other techniques, there are ways to get around systems that are meant to protect our constituents. 



    ------------------------------
    Lindsay Buchanan
    OpEx Technology Administrator
    Gilead Sciences, Inc.United States
    ------------------------------



  • 3.  RE: Has anyone been spammed form this address posing as Cvent?

    Posted 20 days ago
    Hi Lindsay,

    Thank you for the quick response and good ideas. a link to register is on their website. People need an account on our CRM to register and the emails are faked/spoofed. Also we don't display the registration list.

    We will move to have the domain blacklisted. I am hoping Cvent also sees the post in case they want to pursue it with legal action. I can file a case alerting them, too.


    Best Regards,

    Joe Mello
    CFA Institute





  • 4.  RE: Has anyone been spammed form this address posing as Cvent?

    Posted 20 days ago

    Hi Joe,

    I recommend that you reach out to your Customer Success Advisor about this.  They can direct the information to the best place within Cvent without having to wait for someone to see your forum post.



    ------------------------------
    Jess Olcott
    Training Program Coordinator
    ETC, Inc.
    ------------------------------



  • 5.  RE: Has anyone been spammed form this address posing as Cvent?

    Posted 20 days ago
    Thank you, I appreciate the idea and am following up.

    Joe





  • 6.  RE: Has anyone been spammed form this address posing as Cvent?

    Posted 13 days ago

    Hi Everyone,

    Joe and I touched base on this via email, but for anyone reading in the future, the emails the planner is receiving are intended from the Contact Us button being used on the event websites:

    • We regularly see messages with that same "The following message was sent by…" line as part of normal attendee-to-planner inquiries, and occasionally bots do submit junk content through public contact forms.'
    • If the event's "Contact us" or similar form is public, bots can post low-value messages like "good," which then get delivered to the designated recipient via the standard notification template quoted above.
    • If these aren't legitimate inquiries, consider limiting or pausing the public "Contact us" pathway on the affected event(s) (e.g., restrict who can submit, remove the widget, or route it behind a known-audience page) to reduce bot traffic.



    ------------------------------
    Madeline Mason [Designation]
    Customer Success Manager
    Cvent
    ------------------------------