From Entrust Solutions and our friends at ALTA:

Any title professional that handles escrow funds need to be aware of a new fraudulent scheme. According to Entrust Solutions, agents are receiving emails appearing to be from their underwriter. The email asks the agents to “CONFIRM YOUR WIRE INSTRUCTIONS WITH US.” The email message asks for wiring instructions to be sent to an email address from the underwriter. 

Entrust reports that the fraudulent email may contain executable files if you click on the attached link in the email. Some of the attachments in the emails are labeled as WireReport.exe, however it is a Trojan horse malware program.

The emails should be deleted and do not click on any attachments. Entrust encourages agents to contact their underwriter directly if they receive an email similar to this.