I recently did the ACH programming for direct deposit at work, and bank transactions are suprisingly simple, (at least what I was doing) but in the same regards you could see why banks would be getting more attention for attacks. Direct deposit is nothing more than uploading a text file over https. You would think there would be more security checks involved, IE encrypting the file before hand.