This spammed message purports as a notification from ADP. It informs users that their records has been transferred to a certain website. Once users clicked the provided URL, they will be redirected to following websites:

  • http://www.{BLOCKED}n-china.com/mail.htm
  • http://{BLOCKED}n.ru:8080/forum/links/column.php

Accordingly, this spam run is related to the infamous Blackhole Exploit Kit, which is known to leverage various companies and websites for its social engineering tactics. Users are advised to remain vigilant against email messages even if these came from seemingly known sources.

 SPAM BLOCKING DATE / TIME: 23 de января de 2013 GMT-8
 TMASE
  • TMASE Engine: :
  • Patrón TMASE: :9580