Skip to main content
Richard Aldama
Participant
September 20, 2020
Question

Latest Phishing Scam

  • September 20, 2020
  • 4 replies
  • 1067 views

Beware: I got a weird email stating I had not logged in in 60 days and that my account will be shutdown. The email address it came from was mail@mail.adobe.com. It’s a phishing scam but I wanted to send to let everyone know and let the adobe security team know about it too as the email address it’s coming from and the message itself is very deceptive and looks very real. 

This topic has been closed for replies.

4 replies

Nancy OShea
Community Expert
Community Expert
September 20, 2020

If you suspect a physhing scheme, submit it to Adobe.

p h i s h i n g @ a d o b e . c o m

=============
Beware of fake Adobe reps who may contact you privately offering to sell you software or take control of your computer. It's a scam, run away!
=============
3 Easy Ways to Identify Genuine Adobe Staff
https://tinyurl.com/10791730

 

Nancy O'Shea— Product User & Community Expert
Legend
September 20, 2020

You can't tell anything about the authenticity of an email from the address or a ping. Any scammer knows to fill in a convincing email address. Nothing stops faking. 

Just Shoot Me
Legend
September 21, 2020

So when I did a Ping of the mail.adobe.com URL and the ping came back with that IP address and then using that IP address checked WHO it was Registered to and that came back as Adobne Systems Inc. A Scammer could register that corporate name and Address, that if completely Correct, with the American Registry for Internet Numbers and get a Direct Allocation for that Block of IP addresses.

 

I don't think so.

Legend
September 21, 2020

"So when I did a Ping of the mail.adobe.com URL ..." I think you are overthinking this. Since a scammer can use ANY sending email they like, they can send email from official@mail.adobe.com, or trustme@authentic.adobe.com or anyone else. Pinging is interestin, but says nothing about the authenticity of the email.

 

Also, technically, mail from a domain or subdomain has no connection to a web host by that name, except the same ownership. There is no requirement that it come from, or come through, the host and in a big company it certainly won't. 

Nancy OShea
Community Expert
Community Expert
September 20, 2020

Maybe you have more than one account -- a paid plan and a free plan, or a personal plan & school/work plan.

 

 

Nancy O'Shea— Product User & Community Expert
Just Shoot Me
Legend
September 20, 2020

Pinging mail.adobe.com returns 192.150.14.154 as the IP address.

 

 

Using ARIN for look up of 192.150.14.154 returns Adobe Systems.

 

 

So Not a Phishing Scam.

 

Richard Aldama
Participant
September 20, 2020

Hmm The email looked odd in the my email list (formatting wise) plus I have been logging in and out all year. Strange if it was Adobe.