Thursday, August 23, 2007

Monster.com Data Stolen

According to a report from PC World more than 1.6 million records belonging to several hundred thousand job seekers appears to have been stolen from Monster.com by a new Trojan horse called Infostealer.Monstres. The information includes candidates names, addresses, phone numbers, and email addresses. Symantec reports that the (probably stolen) login credentials of legitimate recruiters were used to access resumes on Monster, the data was then uploaded to a remote server and targeted phishing email was sent to those candidates, along with a Trojan horse which looks for bank and credit card account information.

Monster has posted a security warning, along with an example of the fraudulent email. If you have received the email, report it to Monster. Do not respond to the email, if you haven't already. If you have responded to the email, Monster suggests contacting law enforcement authorties. There is also advice on how to protect your privacy on Monster, and here's more advice on protecting your Internet privacy.


Sources: http://jobsearch.about.com/

No comments: