Rejected ACH payment – Virus/Fraud

Look out for fraudulent emails spoofing “The Electronic Payments Association” that are arriving as:

From:     risk_manager@nacha.org
Subject:     Rejected ACH payment

In reality these messages are from previously infected personal computers from across the globe:

from [122.168.251.32] (helo=ABTS-mp-dynamic-032.251.168.122.airtelbroadband.in)

These messages include a fictional warning that includes content such as:

The ACH transaction (ID: 32604668345041), recently sent from your checking account (by you or any other person), was rejected by the other financial institution.

Note that the transaction “ID” number will be randomized to help avoid spam filters that rely on exact matches.   Here’s a complete example:

NACHA Rejected ACH payment Fraud/Virus

Click for Larger Image

The email will prompt you to download the bogus report and will use a legitimate sounding name like “report_32604668345041.doc” or similar.

Be careful to notice that your computer is actually downloading an executable “exe” file that will infect your computer and add it to the spammer’s zombie bot-net:

NACHA Virus Download Confirmation

Click for Larger Image

Under no circumstances should you attempt to download or run these files.

- -

OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.

Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."

OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.

Tags: , , , , , ,

Comments are closed.