Criminals target firms with rogue emails from payroll services providers

[InfoSec News <alerts () infosecnews org>]

https://www.computerworld.com/s/article/9230017/Criminals_target_firms_with_rogue_emails_from_payroll_services_providers

By Lucian Constantin
IDG News Service
August 6, 2012

Criminals are sending malicious emails that purport to come from payroll 
services firms in order to infect with malware the computers of payroll 
administrators from various companies, according to researchers from the 
SANS Internet Storm Center (ISC).

"For the past couple of weeks, companies that offer outsourced payroll 
management services have seen their name being abused for phishing 
scams," SANS incident handler Daniel Wesemann said Sunday in a blog 
post.

"One prominent example is ADP, whose website currently alerts their 
customers to four different samples of phishing emails that make the 
rounds and claim to be from ADP," Wesemann said.

Automatic Data Processing (ADP) is an U.S.-based provider of outsourced 
business services, including payroll management, that claims to have 
approximately 600,000 clients.

[...]