A small family$-$owned construction company made extensive use of online banking and automated clearing house $($ACH$)$ transfers. Employees logged in with both a company and user$-$specific ID and password. Two challenge questions had to be answered for transactions over $$1,000.$The owner was notified that an ACH transfer of $$10,000$ was initiated by an unknown source. They contacted the bank and identified that in just one week cybercriminals had made six transfers from the company bank accounts, totaling $$550,000.$ How? One of their employees had opened an email from what they thought was a materials supplier but was instead a malicious email laced with malware from an imposter account. The malware was written specifically to steal the owner's login credentials by monitoring the keystrokes.