Within the last several months, the FBI has seen a significant increase in fraud involving  exploitation of valid online banking credentials belonging to small and medium businesses.

In a typical scenario, the targeted business receives a "spear phishing" e-mail which either contains an infected attachment, or directs the recipient to an infected Web site.

Once a recipient opens the attachment or visits the Web site, malware is installed on their  computer, which will harvest business or corporate bank account log-in information. The crook will then use the stolen log-in to directly initiate funds transfers by masquerading as the legitimate user. Transfers are directed to the bank accounts of willing or unwitting individuals who have been recruited via work-at-home advertisements.

Business operators should coordinate with their bank or financial provider to be sure they're using proper security safeguards.

The FBI urges anyone who has experienced unauthorized funds transfers from his or her bank accounts to notify the Internet Crime Complaint Center by filing a complaint online. For a detailed analysis of this scam, please visit this Web site.