Sunday, August 19, 2007

Identity Attack Spreads: 1.6M Records Stolen From Monster.com

Gregg Keizer writes on ComputerWorld:

The 46,000 people reportedly infected by ads on job sites may be only a fraction of the victims of an ambitious, multi-stage attack that's stolen data belonging to several hundred thousand people who posted resumes on Monster.com, a researcher said this weekend.

According to Symantec Corp. security analyst Amado Hidalgo, a new Trojan horse called Infostealer.Monstres by Symantec (and Prg by SecureWorks) has stolen more than 1.6 million records belonging to several hundred thousand people from the job search service Monster.com. That data is then used to target the Monster.com users with credible phishing mail that plants more malware on their machines.

"We are investigating the reports related to this Trojan and will take any necessary steps indicated by that investigation," Monster.com spokesman Steve Sylven said Sunday in an e-mail.

The personal information filched from Monster.com includes names, e-mail addresses, home address, phone numbers, and resume ID number, said Hidalgo, who traced the data to a remote server used by the attackers to store the stolen information.

More here.

0 Comments:

Post a Comment

<< Home