Since Adobe seems to update Acrobat weekly, this message seems plausible. Some quick indicators that it isn’t real:
- I get updates through the installed Adobe Updater, not as email messages.
- The update site is instant-acrobat-upgrade.com, not adobe.com.
- The sender’s address is @newsletter.northerntool.com
- No company logo in the message (easy to fake, but many spammers don’t bother).
- It lists an Adobe office in Canada, whereas the company is based in California.
- I got two copies. Not a deal-breaker by itself, but another red flag.
I also looked at the domain registration for instant-acrobat-upgrade.com and it’s registered to someone in Oslo (actually, Oslo,Oslo,AF 0951) with a Yahoo email address. So I’m assuming this is malware. McAfee’s site advisor says it’s queued for evaluation.
Sender: Adobe Acrobat Reader (northern_tool@newsletter.northerntool.com)
Subject: Upgrade to Latest PDF Reader for Windows
Text:
INTRODUCING UPGRADED ADOBE ACROBAT READER 2012
Since the Holidays are in full swing and the New Year is approaching, we’ve decided to unveil our Acrobat Reader/Writer 2012.
http://www.instant-acrobat-upgrade.com
Advanced features include:
– Collaborate across borders
– Create rich, polished PDF files from any application that prints
– Ensure visual fidelity
– Encrypt and share PDF files more securely
– Use the standard for document archival and exchange
To upgrade and enhance your work productivity today, go to:
http://www.instant-acrobat-upgrade.com
Our whole team has been working hard to satisfy your product needs.
This has been a great year for PDF Reader/Writer and it’s all because of You.
We hope to see you in the New Year
Copyright 2012 Adobe Systems Incorporated. All rights reserved.
Adobe Systems Incorporated
343 Preston Street
Ottawa, ON K1S 1N4
Canada
Harriet says
I received 2 also, one at 2am. I actually have a call in to Adobe to see if they would like these emails forwarded with headers (since no email addresses appear on their site). I thought it was weird for several reasons:
* I don’t know any reason “Adobe” would have my email address.
* The 2 emails.
* No logos, just plain text.
* Two “please just click me!” type of links.
* This product is for free? Yeah, I believe that.
* The “northerntool.com” email address–there is a company by that name and they sell physical tools, not computer software.
If it looks too good to be true…
Andrew says
My copies of the spam were sent to an email I registered exclusively for istockphoto.com – so they’re clearly selling email lists.
Rob says
Yep, with regards to Andrew, I’m registered with istockphoto.com too, and received this thought that instant-acrobat-upgrade sounded a bit phoney and as the man says rather lame…. pity the poor fools who click this…
Stephen Rice says
I also received two, both on an email address only provided to istockphoto.com.
Tee Morris says
Really. It’s as if spammers are no longer putting forth an effort anymore…
Welcome to 2012. Stay safe.
Robert says
Rob, Andrew, and Stephen — have you contacted istockphoto? If you used a unique address for that account they either sold it or were hacked. Their privacy policy says they don’t sell or trade customer data. See http://www.istockphoto.com/privacy.php
Amy says
I’m not familiar with istockphoto.com and I received 2 emails as well.. must be from something else?
Steve says
Although I have an iStock account this could be from almost anyone, anywhere!
Have not detected any type of malware-spyware.
Mary says
I got the email today and neither link would open and Malwarebytes popped up and said it had stopped a malware email at such and such port.
I am on a 30 day trial of Malwarebytes. Someone on Facebook suggested it. I wonder if Malwarebytes sends things out so their program “catches
it. I am becoming suspicious of everything after being on the computer for a few years.
I had thought about buying it, but now don’t think I will…this Adobe thing was probably a planted email.
Robert says
I’m glad Malwarebytes saved you. I seriously doubt they’re sending you viruses to get you to buy their software. (I use the free version and haven’t yet needed to upgrade to the paid one.)
Kirk says
Thank you for bringing it to my attention that this is not an actual Adobe upgrade. I get so busy, Adobe sends multiple updates/upgrades, that I really didn’t pay much attention. When I reflect, Adobe always sends updates/upgrades through their download manager.
Robert says
You’re welcome!
It’s safest to use Adobe’s download manager or go directly to their web site.