Mass Spam Attacks Leverage Zendesk Instances

Mass Spam Attacks Leverage Zendesk Instances reports that multiple users have been receiving large volumes of spam emails purporting to come from Zendesk domains, exploiting real companies’ Zendesk instances. One user on X posted that they received 800 emails from different Zendesk instances, with many emails bypassing iCloud’s junk filters, and others noted messages from services they had never used.

Companies affected include Live Nation, Capcom, Tinder, among others, with the content largely resembling bogus lawsuits or government‑related notices. Zendesk has advised users to ignore or delete suspicious emails and suggested administrators remove certain placeholders from first‑reply triggers and restrict ticket submissions to added users; the company stated the incident is not tied to any breach or vulnerability.

The average reader will note that Zendesk did not respond to a request for comment at press time, and experts have indicated the spam could involve relay spam via misconfigured email servers; according to Zendesk’s Cameron Ladd, attackers have exploited relay spam. 20 January 2026.