[ insider_reports_insider ] Monster.com Visitors Victimized By Malware
David Utter Staff Writer
2007-08-20
Insider Reports RSS Feed
Malicious ads appearing on Monster and other job sites have led to Trojans being placed on job seekers' computers, leading to thousands of cases of identity theft.
 | | Monster.com Visitors Victimized By Malware |  |
Researchers at SecureWorks blame criminals for placing ads leading to downloads of the Prg Trojan. That file grabs information as it is entered into web forms and sends it to a remote server.
Don Jackson at SecureWorks blogged that some 46,000 victims had been infected initially, with thousands of corrupted machines still sending pilfered data to the remote server.
Details of the situation quickly worsened when it was revealed the malicious ads leading to the Trojan had been placed on job sites like Monster.com. Jackson told InformationWeek one variant of the Trojan dropped ads on Monster and another unnamed job site.
Citing a dozen caches of data found by his firm, Jackson said in the report, "That's at least four times as large as the largest ones I've run across before. That tells me they're using a lot of different methods to do what they do or they've found really reliable methods to do it."
The criminals responsible have been releasing new variants of the Trojan on average every five days, Jackson said in his blog. It's made things difficult for traditional anti-virus vendors who release signatures to detect the Trojan, only to have it pop back up in a new form that their software won't catch until the next update.
Tags: Monster, Job Search, Trojan, Identity Theft
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|