Possible Creative Cloud Email Scam

Contributor ,
Nov 12, 2019 Nov 12, 2019

Copy link to clipboard

Copied

Our team members are receiving this email. When you click the link (https://t-info.mail.adobe.com/r/?id=...) it does take you to the Adobe site, but it redirects to (https://creativecloud.adobe.com/apps/all/desktop?trackingid=...)

 

Here is the email...

 

Dear (Name),
The latest release of Adobe Creative Cloud is here.
Click here or log in to the Creative Cloud app to update your apps and access the latest features.

Sincerely,
The Creative Cloud Team

 

This Reddit article (https://www.reddit.com/r/sysadmin/comments/d9ndnf/heres_a_phishing_url_to_give_you_nightmares/) says it's a sophisticated phising scam. Getting run around from Adobe about if it's legit or not.

 

Is this real?

TOPICS
Bug

Views

482

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Adobe Community Professional ,
Nov 12, 2019 Nov 12, 2019

Copy link to clipboard

Copied

If you have any doubts, use the Creative Cloud desktop app.

 

If you google for Adobe Creative Cloud, the link is to adobe.com/creativecloud. This makes me dubious about the one in the email. I wouldn't have thought there'd be anyway someone could use that as part of their site name unless they are Adobe, but it's not like I'm a DNS or ICANN expert.

 

Pinging the creativecloud.adobe.com address given gives the IP: 13.225.62.115

Pinging adobe.com gives the IP: 193.104.215.58

 

I'd avoid it. I don't know how it was done, but the difference in IP addresses looks very fishy to me. If you already subscribe to one or more CC applications, just use the CC desktop app.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Nov 13, 2019 Nov 13, 2019

Copy link to clipboard

Copied

Adobe couldn’t tell you if an email as genuine, nobody can, because the point is it could be based on a genuine email with an invisible change. The linked Reddit article gives details of that nasty and clever scam, so examine the URL included in the mail. (you didn’t post it in full)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Contributor ,
Nov 13, 2019 Nov 13, 2019

Copy link to clipboard

Copied

LATEST

Thanks. I didn't post the full URL because it might have contained identifying information specific to my account.

 

I ran similar redirect checkers and it could not find anything in between the original link and the redirect like the Reddit article said.

 

As far as Adobe not being able to tell me if it was legit, I guess I was looking to the commuity to see if others had received the same email.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines