Gameover Malware Targets Job Seekers

itwbennett writes: "A new variant of the Gameover computer Trojan is targeting job seekers and recruiters by attempting to steal log-in credentials for Monster.com and CareerBuilder.com accounts. Like the Zeus banking malware on which it is based, Gameover can steal log-in credentials and other sensitive information by injecting rogue Web forms into legitimate websites when accessed from infected computers. 'A computer infected with Gameover ZeuS will inject a new 'Sign In' button [into the Monster.com sign-in page], but the page looks otherwise identical,' security researchers from antivirus firm F-Secure said Tuesday in a blog post."

Comments

rushed target selection?

[Tablizer]

What kind of genius thief selects the unemployed to steal from? What's next, Pinto owners?

Re:rushed target selection?

[Joe_Dragon]

to send out word docs loaded with word macro virus

Re:rushed target selection?

[Beardo the Bearded]

Yeah, that's what I was thinking. Are you going to steal my no money? Go right ahead.

It's like... if someone breaks into my house looking for money and valuables, I'll hand out flashlights, turn on the lights, and we'll all look together.

My CC is maxed, my LOC is full, my mortgage is full, and my savings are nil. Nothing like getting laid off just after finishing up a divorce.

Re:rushed target selection?

[rmdingler]

Not everyone looking for a job is currently unemployed, of course, and it may have more to do with security vulnerabilities at Monster and CareerBuilders than potential individual targets.

Re:rushed target selection?

[moschner]

Not only are many who are looking for a job already employed, but job sites are a treasure trove of personal information. People post resumes with nearly everything but their ssn. They also give out phone numbers and email address of people they know.

And if you know people are looking for a job, what kinds of jobs, and can then build targeted phishing that looks like a job offer/application, get the person to give you their SSN and information, then sell it or use it.

Re:rushed target selection?

[drinkypoo]

My CC is maxed, my LOC is full, my mortgage is full, and my savings are nil. Nothing like getting laid off just after finishing up a divorce.

Yeah, you say that, but if you can find a corrupt court then you can do anything. For example, some mexican gave some other mexican a car under my social security number. No, like, they're both really Mexican, I'm just kinda Mexican. And then a court in Nevada City, CA went ahead and awarded a judgment against me on the basis of a check cashing card with my social written on it. I haven't bothered to deal with it because I'm not trying to buy a house or anything, but I'll probably have to drive for four fucking hours to get to court in a place even more bumfucked than where I live now in order to deal with it if I don't just leave the country and let them jerk off over this supposed debt until the country collapses. Still undecided, but leaning that way.

Re:rushed target selection?

[niftymitch]

What kind of genius thief selects the unemployed to steal from? What's next, Pinto owners?

Many unemployed still have stuff to steal: identity, credit line, bank account, unemployment checks,..
what they do not have is money to tempt the dark side... (legal types) to defend and advocate for them.

There have been many analysis of the reason it is low risk and profitable to steel bicycles but
not $10,000.00 from a bank.

If the police end up in the presence of cash at the home of a thief they impound it
and the home and more and slip it ALL into the coffers of the municipality/ controlling agency.

So crook "A" has stolen $500,000.00 and they smash the door down for
one theft of $10,000.00 now $490,000.00 goes into the pockets of one group
of crooks armed by your tax dollars and sure $10,000.00 goes back to the
one "known victim". Bicycles... what is the value of having 1000 more of them to the cops?

Re:rushed target selection?

[mmell]

The terrible part is - the poor make better targets than the rich. They're less likely to perceive the importance of monitoring their credit rating and financial standing; if a thief can open one line of credit anywhere with the stolen identity, he's won - and a poor individual is not only less likely to catch the fraud quickly, they're less likely to have the resources to force their new "creditors" to admit they've been duped.

Re:rushed target selection?

[PPalmgren]

Its not about being rich, its about being desperate and gullible. Getting a little from 1 out of 20 is better than getting a lot from one out of 20,000.

Re:rushed target selection?

[Technician]

Not everyone on Monster is unemployed.

I fired my last boss. It was a pay increase, addition of medical, dental, paid relocation, stc.
Sometimes it is a way to transition from a bad job match.

Re:rushed target selection?

[Vitriol Angst]

It's not actually that stupid. As a job seeker, I've been worried about this for some time. You basically give someone the "keys to the kingdom" to put your resume and contact info online. It's a lot of exposure. I've seen the same job advertised for months and months on end -- can they find nobody qualified -- or are they fishing for info? It's hard to tell legitimate from crook today, because there isn't that much distinction in behavior.

I had a call from a company that does contract consulting for a larger "allegedly more legitimate" company -- and they wanted my social security information before even having an interview - on the phone. I asked if there were a way to have a face-to-face without handing out the SS data -- nope. I also asked the parent company and they said; "yes, this was standard." I don't want to work for a company that makes this practice standard -- but then again, I do want to work at some point.

How do I know there isn't another person doing work right now from India using my name? That's the thing -- you aren't stealing money from a job-hunter -- you are stealing their identity and qualifications and providing cheap labor. The company can look the other way and pay less, and the "alleged crook" can make a buck with labor and the American worker gets screwed.

With a little imagination, I can think of a lot of ways to make money posting jobs that never hire and gathering information from job seekers. Now someone hacking the system to steal my data -- that's only a new added risk for me it's not that much worse than the current system to hunt for a job.

Contracted malware while searching for jobs...

[Onuma]

...that's one surefire way NOT to get hired, especially for IT or infosec types of positions.

Craig's List doesn't have any of these problems

[turkeydance]

that's what i was told via an iPad.

Re:Craig's List doesn't have any of these problems

[viperidaenz]

Is that the iPad you won for being the 1,000,000,000th visitor?

What if

[invictusvoyd]

The person clicking the "button" was applying in the computer security domain . Would clicking the "sign in" button disqualify him ?

This is an enhancement

[TrollstonButterbeans]

Monster.com is mostly robot email spam hell with equally useless job listings.

So this is just builds character and makes the site more intriguing and entertaining, kind of like how adding a Wookie makes a Star Wars bar scene more fun.

Only on windows.

[Lumpy]

Chromebooks, Linux and OSX are left immune.

I am tired of being left out of all this fun, anyone have the email of the author so I can complain?

Re:Only on windows.

[Opportunist]

Sorry, but Malware follows the laws of the market. Supply and demand. As long as your exotic out of the world system has an insignificant market share, no Malware for you, buddy.

What are they going to steal?

[Arancaytar]

Resumes?