Source: Information Week
In this article “Beware phishing emails labeled as being from ADP–and other payroll processing providers–which are really designed to exploit PCs using a known Java vulnerability.
According to a security alert issued last week by Automatic Data Processing (ADP), its customers have been receiving fraudulent emails with subject lines such as “ADP Generated Message: First Notice–Digital Certificate Expiration” and “ADP Security Management Update.”
“Please note, these emails do not originating (sic) from ADP and they do contain malicious links,” according to the ADP advisory. “ADP is working with our security vendors and fraud prevention team to identify and contain the source(s) of these emails.”