Thursday, August 30, 2007

The Monster.com mess

As we enter National Identity Fraud Awareness Week, the story of Monster.com's security breach just seems to get worse.

What amazes me is just how little coverage this is getting in the media. This story is huge with not only millions of accounts at risk, but the company seems to have no idea of how many accounts have been compromised.

Even more disturbing is how this scam works, it relies on infected machines running software that logs onto to Monster's database, looks up candidate details and sends the results to spammers and phishers who then use the addresses to spread more spam and malware.

What really concerns me is that I've received a few of these type of emails purporting to be from Seek and MyCareer. I'm wondering if the same scam is at work on these sites as well.

No comments: