Skip to main content
zagarskas
Known Participant
December 3, 2018
Answered

Adobe Server abuse - hack - maleware risk - please investigate

  • December 3, 2018
  • 2 replies
  • 1105 views

A web developer that uses your software at work has now notified you that a file on the Adobe Stock Server server might contain maleware.

Please investigate.

Date: 12-3-2018 - 12:30pm EST

Maleware scan found a file that CCX (creative cloud stock preview tool) downloaded FROM the Adobe server onto my machine. Its is masquerading as a JPEG, it's triggering a RiskWare.ExtensionMismatch because there is more than just image data in the file. I quarantined it and removed it immediately. I suspect a stock user is exploiting your system by uploading jpegs with a virus in them.

Now its up to you to secure your system.

Filename: F26C3473-19FF-4170-8F9C-58992186FE76.JPEG

LocalPath: APPDATA\ROAMING\ADOBE\CCX WELCOME\DATA\ASSETS\F26C3473-19FF-4170-8F9C-58992186FE76.JPEG

Program that detected: Malewarebytes - pro edition

Thank you for your consideration in this matter.

I trust your systems, but I still scan daily- this is the first time I have ever had an issue with Adobe security.

This topic has been closed for replies.
Correct answer WendellaBee

Hello CZ,

I've sent you a private message. Our team will need some additional information from you.

EBQ

2 replies

WendellaBee
Adobe Employee
WendellaBeeCorrect answer
Adobe Employee
December 4, 2018

Hello CZ,

I've sent you a private message. Our team will need some additional information from you.

EBQ

zagarskas
zagarskasAuthor
Known Participant
December 11, 2018

I have replied to your PM with additional information and returned your call.

Thank you for your attention to this matter.

WendellaBee
Adobe Employee
Adobe Employee
December 3, 2018

Hello CZ,

Thank you for bringing this to our attention. Our team is reviewing the information you provided.

EBQ