Monster.com E-mail Attempts to Install Malware

Websense Security Labs has detected e-mails that entice recipients to open a link that instructs the process of upgrading security in their systems. The e-mail perpetrating to come from Monster use HTML code in its content and claim that Monster has upgraded system so users require to download a utility to continue using Monster.

The e-mail points to a domain name that uses five IP addresses. By connecting to one of them the code runs, downloading several files and installing them on the user's computer. It also downloads and installs another file from a Denmark server. Apparently all the files aim to steal users' information.

The fake e-mail says that Monster is happy to inform users about the successful up-gradation of their site. It claims that the system has gone through several changes, therefore recipients must install monster.com certified utility (provides a link) in order to use monster.com database. The e-mail puts a dead line, as March 1, 2007 to set up the tool, otherwise the user will lose his or her account. The e-mail signs off saying it is a newsletter and requires no reply.

Lures of this kind that defraud people are based on social engineering techniques. They steal end user information, which means anyone who unwittingly downloads the code could become a victim of identity theft.

The case is another one of a job site being used as a means to play fraud.

When people post personal information on job sites they often fall in the grip of cyber criminals. Sometimes they victimize job hunters by tricking them to give up personal information in the pretext of offering a job. A well-known scam claimed to recruit people in return for wiring money to their supposed employers.

These demonstrate how a link in an unsolicited e-mail can be risky. It is worthwhile to keep computer protection up-to-date. The key security measure is to identify valid job-related e-mail and reject offers that may fraudulently solicit resume and/ or personal details. It is critical to protect resumes from people attempting to make profits from them instead of helping them find jobs.

Related article: Minnesota To Make Amendments in its Cybercrime Laws

» SPAMfighter News - 3/8/2007