Trojan trawls recruitment sites in ID harvesting scam

[Juha-Matti Laurio <juha-matti.laurio () netti fi>]

Due to holiday season this is some days old but worth of sharing, however:

"Hackers have turned the harvesting of personal information from Monster.com and other large US jobsites into a 
lucrative black market business

A Russian gang called Phreak has created an online tool that extracts personal details from CVs posted onto sites 
including
Monster.com, AOL Jobs, Ajcjobs.com, Careerbuilder.com, Careermag.com, Computerjobs.com, Hotjobs.com, 
Jobcontrolcenter.com, Jobvertise.com and Militaryhire.com.
As a result the personal information (names, email addresses, home addresses and current employers) on hundreds of 
thousands of jobseakers has been placed at risk, according to net security firm PrevX."
--clip--

More at
http://www.theregister.co.uk/2008/07/07/jobsite_data_hackharvesting_hack/

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.