Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Malicious Bank of America CashPro Online Digital Certificate Email

Bogus e-mails appearing to have been sent from Bank of America, contain a malicious attachment. These fake e-mails were sent in order to trick persons into opening the malicious attachment, by claiming that the same attachment contains a digital certificate that should be installed for use with their Bank of America CashPro Online account.

Copy of the Malicious Bank of America CashPro Online Digital Certificate email

Dear CashPro Customer,

This email is being sent to inform you that you have been granted a new digital certificate for use with Bank of America CashPro Online.

Please open the attachment and you will be guided through a simple process to install your new digital certificate.

If you have any questions or concerns, please contact the Bank of America technical help desk.

Thank you for your business,

Bank of America
CashPro Online Security Team
Please do not reply to t his email

Copyright 2013 Bank of America Merrill Lynch

All rights reserved.

The malicious attachment is a zip or compressed file that has the name cashpro_cert_*.zip, which contains an executable file. An executable is a file ending with the extension (.exe).

Never open an executable file that came as an attachment in an email message.

Bank of America or any other companies, will not send any installation file as an e-mail attachment. If you receive an email with instructions to install any attached software or program, delete it.

waiting