Alert: Adobe Warns of License Key Email Scam

[Matsuda]

The company has issued a warning that a malicious email campaign is underway using Adobe software licenses as a lure. Adobe calls it a phishing attack, but other reports say it contains a malware attachment.

Adobe is reporting that "...a phishing campaign is underway involving malicious email purporting to deliver license keys for a variety of Adobe offerings."

Based on other reports, such as this one from MX Lab and this one from Cisco Security Intelligence Operations, the emails are not actually a phishing attack, but contain a ZIP file attachment which itself contains a malicious .exe file.

The file names are License_Key_OR4924.zip and License_Key_Document_Adobe_Systems_____.exe.

The email body, as reported by Cisco is thus:




The MX Lab report shows that there are many variations on the email body. They say the EXE file is 209KB. The VirusTotal report for the malware on Friday night showed 27 of the 49 engines detecting the threat using a variety of threat names .

If you receive similar emails don't open it and delete immediately.





Source

[janedoe]

27 of 49 engines. Wow, NOD32 still showing it's safe. Fat lot of good that free 1-year license is if that's how bad it is! :o Must say detection rates have really fallen of late for Eset. :(

Edited December 22, 2013 by janedoe