The malicious emails are designed to distribute Backdoor.Agent

Mar 5, 2013 21:11 GMT  ·  By

Internet users should beware of fake Automated Clearing House (ACH) notifications which inform them a “transaction is completed.”

ACH spam campaigns are not uncommon, but it appears they’re quite successful, otherwise cybercriminals would probably stop leveraging the name of the electronic funds transfer system in their schemes.

“ACH transaction is completed. $4332 has been successfully transferred. If the transaction was made by mistake please contact our customer service. Receipt on payment is attached,” read the spam emails spotted by experts from security firm Bitdefender.

The file attached to the emails is not a receipt, but a malicious file that unleashes a piece of malware detected by Bitdefender as Backdoor.Agent.

The threat allows the attacker to steal sensitive information from the infected computers.

In order to avoid falling victim to such schemes, experts advise users to avoid opening suspicious-looking attachments. In addition, internauts are recommended to keep their operating system, software and antivirus solutions updated at all times.