Phishers use third-party providers as bait

Employers that outsource their payrolls to third-party payroll providers have reported receiving phony emails referring to “Password Change Notification” or “First Notice—Digital Certificate Expiration.” It’s a scam.