a compass with the words chance, success, risk and failure on the face
Robert L. Weiner: Nonprofit Fundraising Technology Consulting
  • Home
  • Clients
  • About
    • Testimonials
    • Articles by Robert Weiner
    • Presentations by Robert Weiner
    • Services
      • Staffing
      • On-Call Advice
  • Contact

Lame spam of the day: Instant Acrobat Upgrade

January 2, 2012 by Robert 13 Comments

Since Adobe seems to update Acrobat weekly, this message seems plausible.  Some quick indicators that it isn’t real:

  1. I get updates through the installed Adobe Updater, not as email messages. 
  2. The update site is instant-acrobat-upgrade.com, not adobe.com. 
  3. The sender’s address is @newsletter.northerntool.com
  4. No company logo in the message (easy to fake, but many spammers don’t bother).
  5. It lists an Adobe office in Canada, whereas the company is based in California. 
  6. I got two copies.  Not a deal-breaker by itself, but another red flag.

I also looked at the domain registration for instant-acrobat-upgrade.com and it’s registered to someone in Oslo (actually, Oslo,Oslo,AF 0951) with a Yahoo email address.  So I’m assuming this is malware.  McAfee’s site advisor says it’s queued for evaluation.

Sender: Adobe Acrobat Reader (northern_tool@newsletter.northerntool.com)
Subject: Upgrade to Latest PDF Reader for Windows

Text:
INTRODUCING UPGRADED ADOBE ACROBAT READER 2012

Since the Holidays are in full swing and the New Year is approaching, we’ve decided to unveil our Acrobat Reader/Writer 2012.

http://www.instant-acrobat-upgrade.com

Advanced features include:

– Collaborate across borders
– Create rich, polished PDF files from any application that prints
– Ensure visual fidelity
– Encrypt and share PDF files more securely
– Use the standard for document archival and exchange

To upgrade and enhance your work productivity today, go to:

http://www.instant-acrobat-upgrade.com

Our whole team has been working hard to satisfy your product needs.

This has been a great year for PDF Reader/Writer and it’s all because of You.

We hope to see you in the New Year

Copyright 2012 Adobe Systems Incorporated. All rights reserved.

Adobe Systems Incorporated
343 Preston Street
Ottawa, ON K1S 1N4
Canada

Robert

Comments

  1. Harriet says

    January 2, 2012 at 10:27 am

    I received 2 also, one at 2am. I actually have a call in to Adobe to see if they would like these emails forwarded with headers (since no email addresses appear on their site). I thought it was weird for several reasons:
    * I don’t know any reason “Adobe” would have my email address.
    * The 2 emails.
    * No logos, just plain text.
    * Two “please just click me!” type of links.
    * This product is for free? Yeah, I believe that.
    * The “northerntool.com” email address–there is a company by that name and they sell physical tools, not computer software.

    If it looks too good to be true…

  2. Andrew says

    January 2, 2012 at 1:58 pm

    My copies of the spam were sent to an email I registered exclusively for istockphoto.com – so they’re clearly selling email lists.

  3. Rob says

    January 3, 2012 at 1:02 am

    Yep, with regards to Andrew, I’m registered with istockphoto.com too, and received this thought that instant-acrobat-upgrade sounded a bit phoney and as the man says rather lame…. pity the poor fools who click this…

  4. Stephen Rice says

    January 3, 2012 at 1:42 am

    I also received two, both on an email address only provided to istockphoto.com.

  5. Tee Morris says

    January 3, 2012 at 6:00 am

    Really. It’s as if spammers are no longer putting forth an effort anymore…

    Welcome to 2012. Stay safe.

  6. Robert says

    January 3, 2012 at 8:32 am

    Rob, Andrew, and Stephen — have you contacted istockphoto? If you used a unique address for that account they either sold it or were hacked. Their privacy policy says they don’t sell or trade customer data. See http://www.istockphoto.com/privacy.php

  7. Amy says

    January 3, 2012 at 1:53 pm

    I’m not familiar with istockphoto.com and I received 2 emails as well.. must be from something else?

  8. Steve says

    January 5, 2012 at 1:32 pm

    Although I have an iStock account this could be from almost anyone, anywhere!
    Have not detected any type of malware-spyware.

  9. Mary says

    March 11, 2012 at 3:54 pm

    I got the email today and neither link would open and Malwarebytes popped up and said it had stopped a malware email at such and such port.

    I am on a 30 day trial of Malwarebytes. Someone on Facebook suggested it. I wonder if Malwarebytes sends things out so their program “catches
    it. I am becoming suspicious of everything after being on the computer for a few years.

    I had thought about buying it, but now don’t think I will…this Adobe thing was probably a planted email.

  10. Robert says

    March 11, 2012 at 4:28 pm

    I’m glad Malwarebytes saved you. I seriously doubt they’re sending you viruses to get you to buy their software. (I use the free version and haven’t yet needed to upgrade to the paid one.)

  11. Kirk says

    March 13, 2012 at 6:21 pm

    Thank you for bringing it to my attention that this is not an actual Adobe upgrade. I get so busy, Adobe sends multiple updates/upgrades, that I really didn’t pay much attention. When I reflect, Adobe always sends updates/upgrades through their download manager.

  12. Robert says

    March 13, 2012 at 6:31 pm

    You’re welcome!

    It’s safest to use Adobe’s download manager or go directly to their web site.

Trackbacks

  1. PHISHING EMAIL ALERT: Anatomy of a Phishing Scam « ID Guardian says:
    January 3, 2012 at 8:38 am

    […] while this phishing scam is easy to spot (and there are other tells in this phishing email that wave a caution flag), keep in mind that others may be flying on auto-pilot when this and […]

Leave a Reply

Your email address will not be published. Required fields are marked *

Footer #Left

This is an example of a widget area that you can place text to describe a product or service. You can also use other WordPress widgets such as recent posts, recent comments, a tag cloud or more.

Footer #Right

This is an example of a widget area that you can place text to describe a product or service. You can also use other WordPress widgets such as recent posts, recent comments, a tag cloud or more.

Copyright ©2017 Robert L. Weiner: Nonprofit Fundraising Technology Consulting

  • Home
  • Clients
  • About
    • Testimonials
    • Articles by Robert Weiner
    • Presentations by Robert Weiner
    • Services
      • Staffing
      • On-Call Advice
  • Contact