Case 1: BT Line Upgrade Scam

One client received two emails that appeared to be from BT, sent from adobesign@adobsign.com. The emails requested that they review and sign off on a new BT line installation. What made the scam more convincing was a phone call they received beforehand, from someone claiming to be from BT, discussing the upgrade of an existing copper line.

As many are aware, the UK is currently phasing out traditional copper wiring in favour of full fibre – a real change that scammers are now exploiting as a tactic to appear credible.

The client contacted BT directly after receiving the second email and was informed that no such communication had been made. They then alerted us. We’ve since carried out full checks on their system and can confirm that no compromise occurred.

Case 2: Microsoft Licensing Scam

Another client reported a suspicious email also delivered via AdobeSign, again from adobesign@adobsign.com, referencing Microsoft licensing. This followed a similar pattern – using a recognised and trusted platform to encourage the recipient to open or sign a document, potentially exposing them to phishing or malware.

Why These Emails Are Dangerous

• They use trusted brands like BT, Microsoft, and AdobeSign to build credibility.
• They’re often preceded by convincing phone calls, adding to the illusion of legitimacy.
• They exploit real-world changes – such as the UK’s copper line switch-off – to appear relevant.
• The emails often include links to sign documents, which may lead to phishing websites or malware.

What We’re Doing

• We’ve conducted security checks on all reported systems and confirmed no breaches.
• We are reporting incidents to the relevant authorities and industry bodies.
• We continue to monitor for similar threats across our client base.

What You Can Do

• Be cautious of unsolicited emails or calls, even if they appear to relate to legitimate infrastructure changes.
• Always verify with the supposed sender via known contact channels.
• Avoid clicking unknown links or downloading attachments.
• Report anything suspicious to us immediately – we’re here to help.

If you have any concerns about emails you’ve received or want to review your organisation’s security posture, please get in touch.

Stay safe,
The Knowall IT Team