Fresh Phish: Leveraging Legitimate Adobe and Constant Contact Tools in a Multi-Layered Phishing Attack

Looking for the tell-tale signs of a phishing email is something many of us have come to do automatically. However, things get much trickier when the phishing emails come in the form of legitimate Adobe notifications, have been authenticated (SPF & DMARC) by adobe[.]com, and use actual Constant Contact tools as part of their approach. Even with these legitimate elements in place, phishers took this latest phishing scheme to a whole new level, layering on additional (and we mean lots of additional) phishing tactics to achieve maximum results.