14 DAY TRIAL // Cybercriminals have sent out another wave of ACH spam emails in an effort to distribute a piece of malware.
The fake notifications appear to come from Paychex, Inc., and they’re entitled “ACH Notification: ACH Process End of Day Report.”
“Attached is a summary of Origination activity for 11/04/2013. If you need assistance please contact us via e-mail at [email protected] during regular business hours. Thank you for your cooperation,” the emails read.
The file that’s attached to these emails is not a report from the Automated Clearing House, but a Trojan downloader.
If you come across such emails, ignore them, since opening the attachment can cause a lot of trouble, particularly if you’ve downloaded the malware on company computers.
Both MX Lab and Dynamoo’s Blog provide details on this campaign. Some of our readers have also reported receiving these emails, so be on the lookout.