Following on from recent personal information warnings issued to Web 2.0 community users on such sites as Facebook and MySpace, it would appear that online ID criminals are now widening their nefarious net trawling through to recruitment services.
Specifically, news is spreading across the Net outlining that popular recruitment sites are being successfully attacked by a new Trojan virus that has gained access to the personal information of hundreds of thousands of registered users.
Online security experts emanating from both SecureWorks and Symantec have revealed the new Infostealer.Monstres virus after it was discovered trying to gain illicit entry to the official Web site for recruitment specialist Monster.com. Researchers from both security services have labelled the Prg Trojan variant as being unusually efficient and an extremely effective threat. According to researchers at Symantec, the Infostealer.Monstres Trojan has gathered as many as 1.6 million pieces of personal data covering several hundred thousand members of Monster.com’s user base – and that’s not taking into account other affected online recruitment services. Once extracted, the user data is then uploaded to a remote server location. Regarding the attack on Monster.com, California-based Symantec Corporation has offered that the Trojan is utilising the “probably stolen” credentials of many recruitment agencies in order to access Monster.com and carry out specific resume searches across its wealth of job candidates. “The Trojan sends HTTP commands to the Monster.com Website to navigate to the Managed Folders section,” explained Symantec through its official blog. “It then parses the output from a pop-up window containing the profiles of the candidates that match this recruiter’s saved searches.” Monster.com has now been made aware of the vulnerable exploits following Symantec’s discovery of the 1.6 million pieces of stolen data, which were all collected together on a single server. It is likely that Monster will invariably close down the recruiter accounts of all those affected. Further to that, Symantec has advised that, until a prospective employer has been established as being above board, users should refrain from posting sensitive personal information to their job postings. A related Forbes article outlines that Monster.com and its security partner Cyveillance issued a warning to the industry in July that revealed a rise in recruitment site attacks. Infostealer.Monstres, which is generally delivered via phishing mails, is one such criminally engineered Trojan that Monster and Cyveillance covered in their warning.