Online Fraud Targeting Small Businesses

The FBI says there has been a significant increase in malware (containing a key logger) that targets small to medium sized businesses, school districts and government agencies. Here's the details:

In a typical scenario, the targeted entity receives a “spear phishing” e-mail which either contains an infected attachment, or directs the recipient to an infected website. Once the recipient opens the attachment or visits the website, malware is installed on their computer. The malware contains a key logger which will harvest each recipient’s business or corporate bank account login information. Shortly thereafter, the perpetrator either creates another user account with the stolen login information or directly initiates funds transfers by masquerading as the legitimate user.

I've been seeing fake DHL and UPS emails come in to clients of mine. Luckily Untangle has caught them all!