SPAM SCAM USING DIGITAL CERTIFICATE COVER

Posted by incostress on November 27, 2012 · 2 Comments 

Watch out for the spam malware mail.  Regarding digital certificate

Here is the header of the mail and below is the mail. If you get this in your inbox DO NOT OPEN THE ATACHMENT. DELETE!  IT’S BEING SENT FROM MONTANA – BULGARIA

They are posing as ADPClientServices@adp.com

DomainKey-Status: no signature
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on XXX
X-Spam-Level: *****
X-Spam-Status: No, score=5.3 required=7.0 tests=BAYES_50,HTML_MESSAGE,
MIME_HTML_ONLY,RCVD_IN_XBL,RDNS_NONE,SPF_FAIL autolearn=no version=3.2.5
Received: (qmail 962X invoked from network); 27 Nov 2012 12:34:33 -0500
Received-SPF: fail (XXX: domain of adp.com does not designate 178.254.238.191 as permitted sender) client-ip=178.254.238.191; envelope-from=adpclientservices@adp.com; helo=[178.254.238.191];
Received: from unknown (HELO ?178.254.238.191?) (178.254.238.191)
by XXX with SMTP; 27 Nov 2012 12:34:32 -0500
Message-ID: <20121127193431.B46EEC2900BB7D845631.D80FB@AN4ETO-PC>
Date: Tue, 27 Nov 2012 19:34:31 +0300
From: “ADP Client Services” <ADPClientServices@adp.com>
MIME-Version: 1.0
To: info@XXX
Subject: ADP Generated Message: Digital Certificate Expiration
Content-Type: multipart/mixed;
boundary=”————642943601966873101086706″

This e-mail has been sent from an automated system.
PLEASE DO NOT REPLY.
If you have any questions, please contact your administrator for assistance.

———————————————————————
Digital Certificate About to Expire
———————————————————————
The digital certificate you use to access ADP’s Internet services is about to expire.
If you do not renew your certificate by the expiration date below, you will not be able to access ADP’s Internet services.

Days left before expiration: 1
Expiration date: Tue, 27 Nov 2012 19:34:31 +0300

——————————————————————–
Renewing Your Digital Certificate
———————————————————————
1. Install new digital certificate from attached file (self-extracting archive)

2. Follow the instructions on the screen.

———————————————————————
Deleting Your Old Digital Certificate
———————————————————————
After you renew your digital certificate, be sure to delete the old certificate. Follow the instructions at the end of the renewal process.

Related articles

• Cybercriminals Use Fake Digital Certificates to Sign Police Trojans (news.softpedia.com)

Filed under Scams · Tagged with Access control, ADPClientServices@adp.com, cyber criminals, cybercrime, digital services, digital services certificate, fake digital certificates, Internet media type, junk mail, Message-ID, Microsoft Windows, MIME, MIME-Version, Public key certificate, scam mail, Simple Mail Transfer Protocol, spam