Fake ADP Security Management Notification Leads To Malware

Spammed messages were found to spoof a security management notification from Automatic Data Processing, Inc.(ADP). ADP is an American provider of business processing and cloud-based solutions. The mail, which sports a message header and return address similar to ADP's, alerts the reader to an imminent expiration of his system's digital certificate. The message also indicates that the supposed renewal is needed access ADP's Internet services. The message then instructs the reader to open the attached .ZIP file and run its extracted contents. The attached file is in fact malware, and exhibits its malicious routines on the system once run.