Adobe users targeted in dangerous new phishing campaign

Cartoon Phishing
(Image credit: Shutterstock / DRogatnev)

A new phishing attack has been discovered targeting Adobe users. This particular campaign uses an email that purports to be from the non-existent service Adobe Cloud, which informs the targeted individual that they have files to download.

The phishing attack carries all the hallmarks of previously seen campaigns. The email contains brand logos that appear genuine, as well as a URL, which until further inspection, looks like it contains an Adobe domain name.

The next stage of the attack prompts the victim to “Access Your Secured Document,” which subsequently leads them to a login page for Microsoft Office 365, Google, or their email account.

Credential harvesting

If the intended target does enter their details into the login page, they will have unwittingly handed over sensitive information. With the ill-gotten account credentials at their disposal, a cyberattacker can take over accounts belonging to the victim, sending further malicious emails in their name and committing fraudulent activity.

Adobe is far from the only well-known firm to have its brand leveraged as part of a phishing campaign. With the coronavirus pandemic forcing many individuals to work remotely, cyberattackers have decided that now is the time to spread misinformation and embark on a series of malicious campaigns. Recently employed tactics have revolved around the US presidential election and Covid-19 itself.

Although many phishing campaigns are quite sophisticated, there are often clues within malicious emails that reveal their inauthenticity. With the Adobe scam, for example, there is no product known as “Adobe Cloud” in existence. Although the attackers may have been trying to mimic the similarly named Adobe Creative Cloud, the solution is not generally intended as a file-sharing tool.

Via GreatHorn

TOPICS
Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
A man holds a smartphone iPhone screen showing various social media apps including YouTube, TikTok, Facebook, Threads, Instagram and X
A worrying Apple Password App vulnerability reportedlyleft users exposed for months
DeepSeek
Fake DeepSeek installers are infecting your device with dangerous malware
AI tools.
Not even fairy tales are safe - researchers weaponise bedtime stories to jailbreak AI chatbots and create malware
Data leak
Top California sperm bank suffers embarrassing leak
An Android phone being held in the hand
These malicious Android apps were installed over 60 million times - here's how to stay safe
ransomware avast
Billions of credentials were stolen from businesses around the world in 2024
Latest in News
A man holds a smartphone iPhone screen showing various social media apps including YouTube, TikTok, Facebook, Threads, Instagram and X
A worrying Apple Password App vulnerability reportedlyleft users exposed for months
Google Pixel 9a
Google is delaying the Pixel 9a to fix a mystery “component quality issue”
The bottom left corner of an Android phone, showing the Phone, Messages, Google icons and Google Search bar
Google Messages remote delete will soon save you from texting embarrassment – and here's how it works
ExpressVPN mobile app and Aircove
ExpressVPN ‘reduces workforce’ for the second time in two years
The Nanoleaf PC Screen Mirror Lightstrip being used on a desktop computer.
Mac gaming could get an intriguing boost – but not in the way you'd expect
Snapdragon G Series
Qualcomm poised to muscle in on AMD's territory with powerful gaming handheld processors