Wednesday, March 26, 2014

WATCHOUT - Malware targets MONSTER.COM and CAREERBUILDER.COM



This is sad because, (I presume) part of the crowd looking for the job may not be financially well-off and if their credentials are stolen, the situation might get worse for them.


According to the article:- 

Gameover is one of several Trojan programs that are based on the infamous Zeus banking malware

"A computer infected with Gameover ZeuS will inject a new 'Sign In' button [into the Monster.com sign-in page], but the page looks otherwise identical," they said.

After the victims authenticate through the rogue Web form the malware injects a second page that asks them to select and answer three security questions out of 18. The answers to these questions expose additional personal information and potentially enable attackers to bypass the identity verification process.


The links below has more information:

No comments:

Post a Comment