Employment Sites as a Phishing Platform

Steve Ragan reports that hackers used CareerBuilder as a phishing platform to spread malware. Ragan suggests that the attack on CareerBuilder is a test, and that other document distribution sites will almost certainly be targeted.

CareerBuilder is designed to distribute resumes to human resources departments, and documents from the company are whitelisted by my firms. The hackers distributed resumes in Microsoft Word format, resumes which contained scripts which download software to control the user's computer.

-DD