Blast of new spam emails targeting computer users and attempt to infect them with a variant of the banking trojan by posing as ACH transfer failure notifications.
The spam mail has one of the following subject lines:
-ACH payment canceled
-ACH payment rejected
-ACH transaction canceled
-ACH Transfer canceled
-ACH transfer rejected
-Rejected ACH payment
-Rejected ACH transaction
-Rejected ACH transfer
-Your ACH transaction
-Your ACH transfer
.
Each claims to be from “nacha.org” – the National Automated Clearing House Association – the people who handle electronic payments between banks.
The from addresses are:
-ach@nacha.org
-admin@nacha.org
-alert@nacha.org
-alerts@nacha.org
-info@nacha.org
-payment@nacha.org
-payments@nacha.org
-risk@nacha.org
-risk_manager@nacha.org
-transactions@nacha.org
-transfers@nacha.org
The zip file contains the “report_10112011.pdf.exe”, which is a Banking Trojan used to steal banking credentials from the victim (including confidential details such username, password, credit card number, etc.). By harvesting cookies and accessing other information, the criminals can extract a lot of personal information which can be used to increase their chances to get access to the victim’s online banking account.
If you come across such E-mails do not open the attachment. Instead delete them and keep your Antivirus updated. Quick Heal detects the malicious attached file as “Trojan.Genome.vpnbe”. So users are already protected.
We recommend users not to open such attachments from the unknown emails
Leave a reply
