Bank of America Password Infiltrator Trojan

An email supposed to be sent from Bank of America, tried to infiltrate my system with a Trojan. The email spam I received from this bank, although I do not have any relation with it, has the same kind of Trojan that uses passwords infiltration to expose all your passwords.

The scam message goes this way:

Dear Bank of America Direct User:

Our records indicate that a new digital certificate has been issued to your Bank of America Direct user ID.

Digital certificates are computer-based records issued to individual user IDs that allow Bank of America Direct to validate your identity and protect your information from unauthorized access. In order to access Bank of America Direct, you must use a valid digital certificate.

Installation Instructions
To install your newly-granted digital certificate, please access the Digital Certificate Pick-Up site at:

http://direct-certs.bankofamerica.com/direct/certpickup.asp?session=29373540803937876657850317333991332044708496495978631

Please have your Bank of America Direct login information readily available when completing this process.

Should you have any questions regarding this process, please consult your Company Administrator or contact your regional customer support center for further assistance.

Sincerely,
Bank of America Direct Technical Care Center

NOTE: This is an automatically generated communication.

More Information:

Return-Path: < auto_notify.id8453551-4759474cert @ bankofamerica.com >
Delivered-To: .........
Received: (qmail 32605 invoked from network); 17 Apr 2008 14:22:36 -0000
Received: from bzq-79-177-237-13.red.bezeqint.net (79.177.237.13) by ...... with SMTP; 17 Apr 2008 14:22:34 -0000
Received-SPF: softfail (.....................: transitioning SPF record at bankofamerica.com does not designate 79.177.237.13 as permitted sender)
Received: from malaysia.net (unknown [96.36.108.120]) by slavhost. com with SMTP id PH52HS3UMG for < ............. >; Thu, 17 Apr 2008 10:22:29 -0500
From: "Bank of America" < auto_notify.id8453551-4759474cert @ bankofamerica.com >
To: .............
Subject: important instructions: new digital certificate issued [message id: H2043446EF]
X-Spam-Level: 0
User-Agent: MIME-tools 5.503 (Entity 5.501)
X-Mailer: MIME-tools 5.503 (Entity 5.501)
X-Priority: 3 (Normal)
X-Scrubber-List: not listed
X-Scrubber-ClamAV: clean
X-Scrubber-VpopQuota: space available
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_xMHEJFcwoaNCcyuiYzHzRfUjBcztAVyzL"

------=_xMHEJFcwoaNCcyuiYzHzRfUjBcztAVyzL
Content-Type: multipart/alternative; boundary=--VPrv7x1mz9nvn45dgXV

----VPrv7x1mz9nvn45dgXV--

------=_xMHEJFcwoaNCcyuiYzHzRfUjBcztAVyzL
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

This message was modified by F-Secure Anti-Virus E-Mail Scanning.

------=_xMHEJFcwoaNCcyuiYzHzRfUjBcztAVyzL--