Adobe Issues Warning Over Dangerous Spam Messages
Spam messages are annoying simply because they are unsolicited. Besides being a nuisance, spam messages can also pose a risk to the security of your computer and the data stored on that computer. The spam could contain a link to a phishing site (on the phishing site you will be tricked into giving your login credentials away) or to a malware spreading site.
The bad guys will do just about anything to sprad malware – they would even say Bill Cosby died. In their latest effort to spread malware, they are using the good name of Adobe, the California-based company that specializes in creating multimedia and creativity software products. The company has uncovered that there’s a spam campaign going on that tricks computer users into thinking Adobe has sent them a security update.
Wendy Poland, on behalf of the Product Security Incident Response Team (PSIRT), commented: “It has come to Adobe's attention that email messages purporting to be a security directive to Adobe customers have been sent by entities claiming to be Adobe employees. Many of these emails are signed as "James Kitchin" from "Adobe Risk Management" (or similar). In these messages, recipients are directed to download instructions as well as a security update to address "CVE-2010-0193 Denial of Service Vulnerability" (or similar). Please be aware that these emails have not been sent by Adobe or on Adobe's behalf.”
If you do receive an email message that claims to be from Adobe, just delete it. Whatever you do, do not click any link included in the email and do not download any file attached to the email message.
Please note that Adobe never includes links to executables in the emails it sends to its customers. People that have subscribed to the Adobe Security Notification Service for example will receive emails informing them about the latest security threats – but these emails link to security advisories or security bulletins on the adobe.com. they do not link to executable files and they do not have attachments.
The bad guys will do just about anything to sprad malware – they would even say Bill Cosby died. In their latest effort to spread malware, they are using the good name of Adobe, the California-based company that specializes in creating multimedia and creativity software products. The company has uncovered that there’s a spam campaign going on that tricks computer users into thinking Adobe has sent them a security update.
Wendy Poland, on behalf of the Product Security Incident Response Team (PSIRT), commented: “It has come to Adobe's attention that email messages purporting to be a security directive to Adobe customers have been sent by entities claiming to be Adobe employees. Many of these emails are signed as "James Kitchin" from "Adobe Risk Management" (or similar). In these messages, recipients are directed to download instructions as well as a security update to address "CVE-2010-0193 Denial of Service Vulnerability" (or similar). Please be aware that these emails have not been sent by Adobe or on Adobe's behalf.”
If you do receive an email message that claims to be from Adobe, just delete it. Whatever you do, do not click any link included in the email and do not download any file attached to the email message.
Please note that Adobe never includes links to executables in the emails it sends to its customers. People that have subscribed to the Adobe Security Notification Service for example will receive emails informing them about the latest security threats – but these emails link to security advisories or security bulletins on the adobe.com. they do not link to executable files and they do not have attachments.
