Slashdot Mirror

← Back to Stories (view on slashdot.org)

Monster.com Attacked, User Data Stolen

Posted by Zonk on from the rarr-snarl dept.

Placid writes "The BBC has an article detailing a successful attack on the US recruitment site, Monster.com. According to the article, 'A computer program was used to access the employers' section of the website using stolen log-in credentials' and that the stolen details were 'uploaded to a remote web server'. Apparently, this remote server 'held over 1.6 million entries with personal information belonging to several hundred thousands of candidates, mainly based in the US, who had posted their resumes to the Monster.com website'. The article also links the break-in to a phishing e-mail sent out recently where personal details were used to entice users to download a 'Monster Job Seeker Tool.'"

1 of 196 comments (clear)

  1. Symantec has a very detailed explanation of it by indraneil · · Score: 5, Informative

    Symantec's explanation
    The trojan (Called Infostealer.Monstres) seems to be using HR login details (possibly stolen) to access hiring.monster.com and recruiter.monster.com sub-domains and download candidate information. It also seems to be similar to a previously known trojan called Trojan.Gpcoder.E
    Symantec estimates that 1.6 million people (mostly from USA) have been impacted.
    They have informed Monster about it