Woodlands Bank News

Money Mule Security Alert!!

'Money Mule' Security Alert!! ABA is asking all banks to be on the alert for "money-mule" attacks -- funds-transfer fraud that most recently has involved exploiting the valid online banking credentials of small- and medium-sized businesses. In a typical scenario, the targeted entity receives a "spear phishing" e-mail which either contains an infected attachment, or directs the recipient to an infected Web site. When recipients open the attachment or visit the Web site, malware is installed on their computer that harvests their business or corporate bank account log-in information. The victims in this scheme are called "money mules" because they simply serve as a conduit between the business bank account and the hacker's bank account. In most cases, the funds disappear into a foreign bank account too quickly for the cyber-theft trail to be detected. The Financial Services Information Sharing and Analysis Center advises banks to be alert for large-value payments to previously unknown payees; international payments just under monetary reporting thresholds; new, previously unfunded accounts with high-value, high-volume transactions; previously unfunded accounts with large-value incoming funds that are cashed out as soon as funds are cleared; and domestic online bank-account transactions in which the account is accessed from overseas and transactions involve large-value funds. Incident Reporting Besides having customers report the matter to local law enforcement agencies, where online fraud is identified the FS-ISAC strongly encourage victims of cyber crime to contact their local FBI field office, http://www.fbi.gov/contact/fo/fo.htm, or file a complaint online at www.IC3.gov. FS-ISAC member institutions are requested to report suspicious activity via anonymous submission using the FS-ISAC Cyber Incident Report. Alternatively, members may contact the FS-ISAC Security Operations Center directly at 1-888-732-2812 to obtain immediate assistance. The FS-ISAC website at http://www.fsisac.com has further contact and useful information.