Legend

Answered

Anybody else receiving lots of spam email from "mail@mail.adobe.com"?

Forum|Forum|4 years ago
February 4, 2021
6 replies
86776 views

I'm interested to know whether any other user of any Adobe software has been receiving a lot of recent emails, apparently from mail@mail.adobe.com, almost all of which can only be best described as "Non-Adobe Spam", e.g. offers of prepaid cards (with large funds already loaded), or advertising "NortonLifelock Partner"?

I run Mailwasher Pro to filter my incoming emails and so can "blacklist" (aka block) either the sender or the domain from which the message comes.

This is a problem for the above email sender address because I have received some messages which are clealry genuine and which I want to read, so blocking either sender or domain is not acceptable.

So, has "mail@mail.adobe.com" been hijacked???

Jeff

Correct answer Dov Isaacs

@emmrecs,

The e-mail samples you provided on February 4 were not sent by Adobe at all. Nor was the Adobe domain or e-mail address been hijacked in any way. Unfortunately, due to the internet e-mail protocols, Adobe cannot prevent anyone from trying to spoof our e-mail address in the From line, but a good spam filter would have recognized these e-mails as spam due to all the inconsistencies in the rest of the header fields.

@mcpickett,

In terms of the e-mails you got today, without the full set of headers, I cannot ascertain what is going on. E-mails of this form are indeed sent out by Adobe for non-active accounts (i.e., no products registered, no subscriptions, no navigating of the web site). The fact that you logged into these communities should stop those e-mails if they are legitimate. There are links in the screen shots you provided. What happens if you pass your cursor over those links and buttons (not clicking on them). What URL do you get?

D

Delightful_Flair4055

Participant

Very useful all the information. Its a good option check if sender domain its legit or not: https://infowebstats.com/whois/mail.adobe.com

P

PegDrewThat

Participant

I got one of those today too. The tip off was they they sent it to the wrong email address - not the one I use for my work correspondence and log-ins to work-related sites. But I blurred out my non-work email on the attached image:

Abambo

Community Expert

I got one of those today too. The tip off was they they sent it to the wrong email address - not the one I use for my work correspondence and log-ins to work-related sites. But I blurred out my non-work email on the attached image:

By @PegDrewThat

That may well be legit, if you have created an Adobe ID under that e-mail. What I do, when getting such mails:

I check the e-mail's header (that's technical, probably not for everybody).
I check if I created an account using that mail address.
I hover the linked address, to see, if they really points to a legit web address.
I go directly to the site, without using the link provided.
If I'm not interested in the account, I let it expire without further action. 🙂

ABAMBO | Hard- and Software Engineer | Photographer

N

Neil23259064ab5x

Participant

We are receiving an increasing number of spam emails coming from message@adobe.com

Is anyone else experiencing this and is there anyway to block this spam activity but still allow the real adobe.com content?

Appreciate any guidance, as it sort of links to this thread but not exactly.

Neil 🙂

M

markf8611371

Participant

Just got one too

Abambo

Community Expert

This one may be legit, especially if you have named fonts installed. If you hoover the links, and they don't point to something like adobe.com, they may however be fake. As a precaution, I (almost) never click on links in emails, but visit the websites "on foot".

You can see the message also by visiting the fonts on fonts.adobe.com: https://fonts.adobe.com/fonts/new-atten

ABAMBO | Hard- and Software Engineer | Photographer

Dov IsaacsCorrect answer

Legend

@emmrecs,

The e-mail samples you provided on February 4 were not sent by Adobe at all. Nor was the Adobe domain or e-mail address been hijacked in any way. Unfortunately, due to the internet e-mail protocols, Adobe cannot prevent anyone from trying to spoof our e-mail address in the From line, but a good spam filter would have recognized these e-mails as spam due to all the inconsistencies in the rest of the header fields.

@mcpickett,

In terms of the e-mails you got today, without the full set of headers, I cannot ascertain what is going on. E-mails of this form are indeed sent out by Adobe for non-active accounts (i.e., no products registered, no subscriptions, no navigating of the web site). The fact that you logged into these communities should stop those e-mails if they are legitimate. There are links in the screen shots you provided. What happens if you pass your cursor over those links and buttons (not clicking on them). What URL do you get?

- Dov Isaacs, former Adobe Principal Scientist (April 30, 1990 - May 30, 2021)

mcpickett

Participant

Dov, image copies of links attached.

Dov Isaacs

Legend

Those are indeed valid links to Adobe!

- Dov Isaacs, former Adobe Principal Scientist (April 30, 1990 - May 30, 2021)

John T Smith

Community Expert

>has "mail@mail.adobe.com" been hijacked???

Probably not... but spoofing the return address is easy (I have even been sent spam that was supposedly from myself) so the full header will allow Dov to provide information to the p-hishing team

Dov Isaacs

Legend

Please provide some screenshots of what you are seeing. The full e-mail headers would also be helpful. What you are reporting seems exceptionally suspicious and I can forward this information to our legal folks for followup.

- Dov Isaacs, former Adobe Principal Scientist (April 30, 1990 - May 30, 2021)

E

emmrecsAuthor

Legend

@Dov Isaacs

Thanks for this reply.

Using Mailwasher I have extracted ALL the data from two of these emails and copied the header and all html to the two attached documents. (For obvious reasons, I hope, since this is a public forum, I have removed my own email address.)

The actual emails are currently in the Mailwasher Recycle bin; I have never fully opened any of them in my email client so have never read the actual content.

If you want any further information etc. please contact me (I'm sure your records will show my personal email address since it is my Adobe forums login).

Jeff

Spoof_email_header.docx

Spoof_Email_header_2.docx

E

emmrecsAuthor

Legend

Sorry to be asking about this again but..

I'm still receiving anything between 10 and 20 emails each day, purporting to come from that email address (a very quick check of the "subjects" lists everything from Free Groceries to Gift Cards, etc., etc..). For, I hope, obvious reasons I don't want to block/blacklist that address but it is becoming rather tedious to have to mark each one as Spam; this means they never actually get downloaded to my email client so I never read them but I do have to check each one carefully. Some from that email address are genuine and I want to read and keep them!

I'd be happy to forward at least some of the actual emails to Adobe if that would be helpful; I just need an email address to send them to.

TIA

Jeff

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded