Job Hunting Dangers: Phishers Come Calling
People looking for work may be tempted to click on a spam purporting to be from Monster.com, but will end up giving their personal details to criminals.
A tide of phishing that swept over CareerBuilder.com washed up on the shores of its rival Monster, as a wave of junk messages started hitting inboxes seeking personal information.
Job seekers unwilling to miss out on a potential lead may click the links in these messages to update their personal data as requested. Security vendor McAfee said these latest messages look like they come from Monster’s customer service department.
However, the destination from the link in the spam goes to a UK domain, with DNS traced to a bot in Turkey, McAfee’s Zhedong Chen wrote. Recent phishing attacks under Monster’s name appear to focus on recruiter accounts.
Such accounts may lead to many more job recruit profiles available from the recruiter’s workspace. Identity theft would be trivial to commit with the range of details available from that treasure trove of data.
“This should not discourage job hunters from using online job sites like Monster.com, but reinforces the need to block spam and educate employees on the dangers of phishing,” McAfee’s Dave Marcus said of the threat. Unsolicited emails should always be treated with a healthy dose of skepticism and care; when in doubt, delete it.