Slashdot Mirror

← Back to Stories (view on slashdot.org)

Gameover Malware Targets Job Seekers

Posted by Soulskill on from the game-over-man,-game-over dept.

itwbennett writes: "A new variant of the Gameover computer Trojan is targeting job seekers and recruiters by attempting to steal log-in credentials for Monster.com and CareerBuilder.com accounts. Like the Zeus banking malware on which it is based, Gameover can steal log-in credentials and other sensitive information by injecting rogue Web forms into legitimate websites when accessed from infected computers. 'A computer infected with Gameover ZeuS will inject a new 'Sign In' button [into the Monster.com sign-in page], but the page looks otherwise identical,' security researchers from antivirus firm F-Secure said Tuesday in a blog post."

4 of 42 comments (clear)

  1. rushed target selection? by Tablizer · · Score: 5, Funny

    What kind of genius thief selects the unemployed to steal from? What's next, Pinto owners?

    --
    Table-ized A.I.
    1. Re:rushed target selection? by Beardo+the+Bearded · · Score: 4, Funny

      Yeah, that's what I was thinking. Are you going to steal my no money? Go right ahead.

      It's like... if someone breaks into my house looking for money and valuables, I'll hand out flashlights, turn on the lights, and we'll all look together.

      My CC is maxed, my LOC is full, my mortgage is full, and my savings are nil. Nothing like getting laid off just after finishing up a divorce.

      --

      ---
      ECHELON is a government program to find words like bomb, jihad, plutonium, assassinate, and anarchy.
    2. Re:rushed target selection? by moschner · · Score: 3, Insightful

      Not only are many who are looking for a job already employed, but job sites are a treasure trove of personal information. People post resumes with nearly everything but their ssn. They also give out phone numbers and email address of people they know.

      And if you know people are looking for a job, what kinds of jobs, and can then build targeted phishing that looks like a job offer/application, get the person to give you their SSN and information, then sell it or use it.

  2. Craig's List doesn't have any of these problems by turkeydance · · Score: 3, Informative

    that's what i was told via an iPad.