The Trojan that was able to breach through Monster.com’s defenses seems to have claimed quite a few resume’s; 1.3 million according to this article. At this point, Monster states that they will be strengthening their security as well as contact the people who have had their resume’s stolen via this Trojan. One thing to learn from this is how easy it can be to steal your resume information. All someone has to do is sign up to a job posting website like Monster.com as an employer, post up a job that has amazing pay and benefits, and wait as the resume’s come flooding in. Since this trend has been happening for quite some time now, you would think these sites would do a little better job at analyzing the backgrounds of these ‘employers’ to see if they are legitimate or not.

Monster Worldwide, the owner of employment search site Monster.com, began notifying this week the estimated 1.3 million users affected by a breach that leaked résumé information and pledged to beef up network monitoring and defenses to prevent such a leak from happening again.

As reported by SecurityFocus, a malicious Trojan-horse program dubbed Infostealer.Monstres accessed résumé data using stolen, but valid, employer credentials and copied the information to a remote server. The information included names, physical and e-mail addresses, and phone numbers. At least one reader of SecurityFocus has claimed to have been notified by Monster that their information had been stolen.

The company has stated that it will contact the estimated 1.3 million people affected by the breach. The company also promised to strengthen security measures, including monitoring site traffic worldwide, reviewing all site access policies and investigating better ways of protecting users’ information.[more]

Tags: Identity Theft