Monster.com attacked
A possible 1.6 million records could have been stolen by a malicious hacker group. A new Trojan Horse called Infostealer.Monstres has been placed in Monster.com.
“We are investigating the reports related to this Trojan and will take any necessary steps indicated by that investigation,”
Was the response from Monster.com spokesman Steve Sylven. This new Trojan uses many ways to inflict damage and steal money. The first thing it does is gather the E-Mail address stolen from Monster.com and sends the owner a messages claiming to be Monster.com. It will then get them to download “Monster Job Seeker Tool.” This is really either Banker.c or Gpcoder.e.
Banker.c is standard piece of Malware that will log user names and passwords when people do online banking. Once it has obtained the information it will send it to Hacker HQ. The other piece of Malware, Gpcoder.e, will encrypt files on your computer and will hold them to ransom. You will have to pay for a password in order to get your files back.
Steve Sylven also stated that it was hard to track scripts and programs from a normal person saying:
“Many of our larger customers rely heavily on our database, and their use may be similar to programmatic or scripted access,”
Technorati Tags: Monster.com
Greg
September 30th, 2007 at 4:48 am
crap i use monster.
Genaral_TS
October 1st, 2007 at 4:44 pm
@Greg Unless you have downloaded something from them i think you should be ok.