Dear Sir or Madam,
This message includes a notification about the ACH debit transfer sent on your behalf, that was held by our bank:
Transaction ID: 471209863177939
Transaction status: pending
In order to resolve this matter, please review the transaction details using the link below as soon as possible.
The link in the spam routes through a couple of hacked sites to a malicious payload at chillestruct.com on 184.108.40.206 (Zerigo Inc, California) and closteation.com on 220.127.116.11 (Endurance International, Massachusetts). Wepawet reports are here and here.
Blocking the IPs will prevent any other malicious sites on those servers from causing problems.
Leave a reply