Number: IRCNE2013122049
Date: 2013/12/20
According to “zdnet”, Adobe is reporting that "...a phishing campaign is underway involving malicious email purporting to deliver license keys for a variety of Adobe offerings."
Based on other reports, such as this one from MX Lab and this one from Cisco Security Intelligence Operations, the emails are not actually a phishing attack, but contain a ZIP file attachment which itself contains a malicious .exe file.
The file names are License_Key_OR4924.zip and License_Key_Document_Adobe_Systems_____.exe.
The email body, as reported by Cisco is thus:
Subject: Download your adobe software
Message Body:
Hello.
Thank you for buying Digital Publishing Suite, Professional Edition Digital Publishing Suite software.
Your Adobe License key is in attached document below.
Adobe Systems Incorporated.
The MX Lab report shows that there are many variations on the email body. They say the EXE file is 209KB.
- 2