Monster.com Compromised

The Register is reporting on a blog entry at Symantec about a host they found logging into monster.com using stolen recruiter credentials. The application then dumps presonal data such as name, surname, email address, home address, phone numbers to a report server controlled by the attackers.

I saw new spam today that is asking you to log into a recruiting database. I deleted them before investigating further. Perhaps they are realted?

This entry was posted on Tuesday, August 21st, 2007 at 9:33 am and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

Comments are closed.