US job website Monster.com has suffered an online attack with the personal data of hundreds of thousands of users stolen, says a security firm.It appears as though anybody who has ever used Ebay, or done any type of online shopping could be similarly exploited.
"This remote server held over 1.6 million entries with personal information belonging to several hundred thousands of candidates, mainly based in the US, who had posted their resumes to the Monster.com website," reported Symantec.
Symantec said it had seen reports of phishing e-mails sent out to Monster.com users which were "very realistic" and contained "personal information of the victims".The "double edged sword" of technology.
The e-mail encouraged users to download a Monster Job Seeker Tool, which was in fact a program that encrypted files in their computer and left a ransom note demanding money for their decryption.
Technorati Tags: Monster.com, phishing, Monster Job Seeker Tool