The ACH Debit Transfer Alert has been making the rounds since at least last fall. Below is a copy of the email with links disabled. As you can see the recipient is encouraged to click on the link to learn more fix the transaction. The link leads to a website where malware is hosted. The malicious code executes several Windows registry changes and establishes a connection with the attackers’ IP address
Dear Sir or Madam,
This message contains an important information regarding the ACH debit transfer sent on your behalf, that was kept back by our bank:
Transaction #: 195585243650521 Status of the transaction: under consideration In order to resolve this matter, please review the transaction details using the link below as soon as possible.
Yours truly,
Shirley Meyer
Chief Accountant
This scam is particularly effective because there are so many people who are struggling financially. Many merchants have a store name and a business name that are different. Often their lesser known business name is used for online transactions. Usually the company lets the consumer know the name will be different on the online transaction but not always. Of course there is no phone number in this email which is a big tip off that the sender is sending malicious links.
Always check with Google before clicking on the links of any emails that are vague like this one is.











